Devsecops Security Consultant

Job Description
Insight Global is looking for a Devsecops Consultant to assist with the security service management team. This consultant should have experience with running a proof of concept (POC) with an external vendor, and have experience setting up the rules/KPI's of that POC. The POC they could have familiarity with could be for a service or a security tool. They will work hand and hand with the hands on security team to ensure the way in which devsecops is operating day-to-day is the best and most efficient within its practice.

They may make recommendations for changes for processes, tools, methodologies…etc. to better enhance the program.

We are a company committed to creating diverse and inclusive environments where people can bring their full, authentic selves to work every day. We are an equal opportunity/affirmative action employer that believes everyone matters. Qualified candidates will receive consideration for employment regardless of their race, color, ethnicity, religion, sex (including pregnancy), sexual orientation, gender identity and expression, marital status, national origin, ancestry, genetic factors, age, disability, protected veteran status, military or uniformed service member status, or any other status or characteristic protected by applicable laws, regulations, and ordinances.

If you need assistance and/or a reasonable accommodation due to a disability during the application or recruiting process, please send a request to  learn more about how we collect, keep, and process your private information, please review Insight Global's Workforce Privacy Policy:

Skills and Requirements

7+ years of experience working within Cybersecurity at large enterprises

Recent 3+ years of Dev Sec Ops  experience within a large enterprise environment, with a proven track record of integrating security into software development life cycles and driving security initiatives across complex technology ecosystems.

Hands‑on experience with application security testing and security scanning technologies, including:

Static Application Security Testing (SAST)

Dynamic Application Security Testing (DAST)

Software Composition Analysis (SCA)

Vulnerability scanning and security assessment tools

Strong understanding of Dev Sec Ops  and CI/CD pipeline security, including embedding automated security controls, scanning, and governance into modern development pipelines to identify and remediate vulnerabilities throughout the software development lifecycle.

Knowledge of Snyk and similar security tooling, including implementation, configuration, optimization, reporting, and integration with development workflows and CI/CD platforms.

Demonstrated experience leading and executing Proofs of Concept (POCs), including:

Defining business and technical requirements

Establishing success criteria and KPIs

Planning and executing testing strategies

Evaluating results and presenting recommendations

Supporting solution selection and implementation decisions

Knowledge of Artificial Intelligence (AI) security concepts and emerging technologies, including:

Large Language Models (LLMs)

AI Agents

Model Context Protocols (MCPs)

AI application architectures and associated security risks

Ability to run a POC for AI to assess and validate AI security solutions, including defining AI security scanning requirements, evaluating AI-specific security controls, and testing AI functionality against business, security, and compliance requirements.

Ability to translate business and security requirements into technical solutions, while balancing risk, scalability, developer experience, and operational efficiency.

Experience developing security standards, requirements, and governance processes related to application security, cloud security, Dev Sec Ops , and AI security initiatives.

#J-18808-Ljbffr