Lead, Dev SecOps; Charlotte, NC​/Stamford, CT

Overview

As a Lead, Dev Sec Ops, you will own pipeline security, Cisco AI Defense operations, and code hardening practices across the development estate. You will partner with Engineering and Software Development to embed security into every stage of software delivery while operationalizing runtime AI protection for customer-facing LLM features. You will oversee a virtual team comprised of dedicated Dev Sec Ops members and shared resources from other teams.

Build a security champions network across development teams and serve as a technical advisor to the AI Governance Committee.

• Own the end-to-end application security pipeline: SAST, DAST, SCA, secrets detection, IaC scanning, and container scanning across the Enterprise code estate
• Define and enforce control gates
• Manage the pipeline gating philosophy
• Own the exception register, including time-bound exceptions with named compensating controls and expiry dates
• Drive migration of production code into Enterprise Git Hub to enable uniform scanning, gating, and provenance tracking
• Partner with technical leaders on activity reviews, finding burn-down, gate friction, and release-level blockers
• Establish provenance tagging for AI-generated and third-party code so it passes the same gates as enterprise code
• Analyze modern and legacy programming languages
• Oversee Dev Sec Ops  tie-ins with suppliers performing development activity
• Operationalize Cisco AI Defense and Multi-Cloud Defense across major public cloud providers
• Operate Cisco AI Defense across the following capabilities:
  Model & App Validation, Runtime Protection, Knowledge Security, and Cloud & Asset Visibility
• Serve as a technical advisor to the AIGC, delivering validation reports, AI SBOMs, and risk inputs
• Define and enforce AI guardrails policy including data classification enforcement, prompt injection defense, output safety controls, and agent action/tool-use limits
• Oversee the phased AI Defense deployment roadmap from foundation through full enforcement
• Oversee IAM and SSO integrations with both internally developed and SaaS tools
• Coordinate with Sec Ops on incident response and playbook development related to Dev Sec Ops  and AI security
• Consult on shadow AI discovery and employee AI tool usage
• Lead the Dev Sec Ops  Analyst, setting priorities, developing skills, and reviewing work quality
• Coordinate the engineering resources on pipeline engineering, tool administration, and cloud posture work
• Build and sustain a security champions network with champions in each development team, providing coaching, training, and support
• Deliver OWASP-aligned secure code training (Top 10, API Top 10, LLM Top 10, Code Hardening) and role-based / language-based deep dives for development teams
• Facilitate Dev Sec Ops  working sessions, leadership syncs, and executive reporting
• Publish program metrics regularly
• Partner with Sourcing to oversee supplier relationships tied to Dev Sec Ops

• Bachelor’s degree in computer science, cybersecurity, software engineering, or comparable work experience
• 7+ years of experience in application security, Dev Sec Ops , Dev Ops, or security engineering roles
• Proven track record of building or significantly maturing a pipeline security program (SAST, DAST, SCA, secrets, containers)
• Hands-on experience integrating security tools into CI/CD pipelines (Git Hub Actions, Git Lab CI, Jenkins, or similar)
• Strong understanding of modern software development practices such as Git workflows, containerization, infrastructure as code, and cloud-native architectures
• Experience defining and enforcing security gates in a development pipeline without creating undue friction
• Demonstrated ability to lead cross-functional initiatives involving development, infrastructure, and security teams
• Experience mentoring junior security team members
• Strong written and verbal communication skills, including the ability to present technical findings and program status to executive audiences
• Advanced organizational skills, ability to successfully manage multiple tasks/incidents
• Experience with Snyk, Burp Suite, Aikido, or similar SAST/DAST/SCA platforms
• Familiarity with AI/ML security concepts: prompt…