DevSecOps & Supply Chain Security Consultant

Аналитика рынка

Стек

Бесплатно. Вход по почте.

Откликнуться

Загрузите резюме — мы свяжем вас с работодателем напрямую через нашу базу.

Описание

DevSecOps & Supply Chain Security Consultant Role Summary Seeking a US Person with 10+ years of experience in secure software delivery, CI/CD and software supply-chain security. The role covers secure SDLC, pipeline architecture and access, build provenance, artifact signing and promotion, SBOM/VEX/CSAF, dependencies, secrets, SAST/DAST, containers, IaC, vulnerability governance and regulatory evidence. The consultant will validate source-to-release traceability, tamper resistance, SBOM accuracy, security gates, exceptions and remediation; produce audit-ready findings, release-readiness and residual-risk conclusions; and recommend finding-specific work. CRA, regulated-product and stakeholder-reporting experience is highly preferred. Key Responsibilities Assess software supply chain security, SDLC maturity, SBOM governance, CI/CD pipeline controls, secrets management, logging/auditability, and vulnerability management to support lifecycle security evaluation and compliance traceability. Review SDLC processes, tooling, and secure development practices Assess software supply chain security, including SCA, SBOM accuracy/completeness, dependency governance, and third-party risk Evaluate CI/CD pipeline security, artifact integrity, and secure release controls Review secrets management across development, build, deployment, and operational environments Assess logging, auditability, and security event traceability controls Evaluate vulnerability management, remediation tracking, and

Полное описание, компания и ссылка на вакансию — после входа. Войти

Контакты работодателя (email/phone/telegram) скрыты из публичного превью — отправьте резюме, чтобы мы связали вас напрямую.