Application Security Architect

ROLE DETAILS

- Title: DevSecOps Contractor (Security Engineer)

- Location: Remote / Onsite (as business needs dictate)Primary Tools: GitLab Ultimate, Docker/Kubernetes, Terraform/Ansible, SonarQube, BlackDuck or Nexus Lifecycle (SCA), Snyk or Trivy, OWASP ZAP

ROLE OVERVIEW

Drive security‑by‑design across GitLab CI/CD and enforce guardrails that ensure application security, compliance, and reliable delivery. The role covers vulnerability management, pipeline security, standardized secure SDLC practices, transition planning from legacy tools to GitLab‑native capabilities, and close collaboration with InfoSec, Cloud Platform, and Product teams.

KEY RESPONSIBILITIES

1. Pipeline Security & Automation
2. 
   - Implement and maintain automated SAST, DAST, SC...