Senior Information Protection Advisor – Product Security, DevSecOps

Responsibilities

• Partner with development teams to embed security practices that enable safe, scalable, and high-quality product delivery
• Design and implement automated security solutions within CI/CD pipelines to strengthen application security posture
• Integrate and optimize application security testing tools (SAST, DAST, SCA, MAST) across multiple development environments
• Influence secure architecture decisions by contributing to the design and implementation of modern applications and platforms
• Lead security assessments, threat modeling, and vulnerability analysis to proactively identify and reduce risk
• Develop and enhance reusable security services, tooling, and automation frameworks that support enterprise-wide Dev Sec Ops  maturity
• Provide expert guidance to engineering teams on secure development practices and emerging security trends
• Strengthen collaboration across cross-functional teams to promote a culture of shared security ownership
• Ensure alignment with regulatory and compliance requirements (e.g., HIPAA, PCI-DSS, GDPR) where applicable
• Improve security operational efficiency, performance, and cost optimization across application environments

• 8+ years of experience in cybersecurity, with a focus on application or product security
• Proven experience integrating and automating security tools in CI/CD pipelines
• Strong understanding of secure software development principles and modern SDLC practices
• Hands-on experience with application security testing tools (SAST, DAST, SCA, MAST)
• Experience designing and implementing security solutions across complex development environments
• Familiarity with cloud platforms (AWS, Azure, or Google Cloud) and securing cloud-native applications
• Strong interpersonal skills with the ability to influence and collaborate across engineering teams
• Demonstrated ability to work effectively in Agile environments