DevSecops Consulant

DevSecops Consulant

Duration: 12 months, renewable, temp-to-perm possible

Location: Remote

Languages: French must have. English Must have

Hours: 37.5

Key Responsibilities:

• Define and evolve the DevSecOps product vision, strategy, and roadmap in line with the program's objectives.
• Prioritize pillar capabilities and investments based on value, risk, dependencies, and impact on development teams.
• Drive the evolution of capabilities including SAST, SCA, IaC, secrets, containers, and DAST/fuzzing, as well as their integration with GitHub, Azure DevOps, TFVC, and delivery pipelines.
• Advance visibility and traceability of application assets, including inventory, repositories, applications, their owners, and SBoM.
• Evolve vulnerability consolidation and contextualization, risk-based prioritization, and mechanisms for teams to focus efforts on the most important risks.
• Inform capabilities to accelerate remediation and automation, including automated remediation PRs, exception management, and dependency evergreening.
• Evolve SLAs, metrics, gating mechanisms, and control effectiveness metrics to make visible the exposure, deviations, and adoption of DevSecOps practices.
• Align with dependent initiatives and platforms, including CMDB/ServiceNow, GitHub, Azure DevOps, and SDLC security capabilities. The CMDB is explicitly intended to contextualize assets, managers, and exposure.
• Work with Product Owners, architects, safety experts, and delivery teams to transform product directions into capabilities and value increments, while maintaining a cross-functional vision.