Information Protection Advisor, Product Security - DevSecOps

What you'll do

• Design and implement automated security solutions within CI/CD pipelines.
• Integrate and optimize SAST, DAST, SCA, and MAST tools across development environments.
• Conduct threat modeling, vulnerability analysis, and security assessments to reduce risk.
• Develop reusable security services, tooling, and automation frameworks for DevSecOps maturity.
• Influence secure architecture decisions for modern applications and platforms.
• Provide expert guidance to engineering teams on secure development practices.
• Ensure application alignment with regulatory and compliance requirements like HIPAA and GDPR.

What we're looking for

• At least 5 years of experience in cybersecurity with a focus on application or product security.
• Proven experience integrating and automating security tools within CI/CD pipelines.
• Strong understanding of secure software development principles and modern SDLC practices.
• Hands-on experience with application security testing tools including SAST, DAST, SCA, and MAST.
• Experience designing and implementing security solutions across complex development environments.
• Familiarity with cloud platforms such as AWS, Azure, or Google Cloud to secure cloud-native applications.
• Proficiency in scripting or programming languages like Python, Java, or Shell.
• Knowledge of regulatory and compliance frameworks including HIPAA, GDPR, and PCI-DSS.