21 Oct
|
Experis Canada
|
Quebec City
21 Oct
Experis Canada
Quebec City
DevSecops Consulant
Duration: 12 months, renewable, temp-to-perm possible
Location: Remote
Languages: French must have. English Must have
Hours: 37.5
Key Responsibilities:
- Define and evolve the DevSecOps product vision, strategy, and roadmap in line with the program's objectives.
- Prioritize pillar capabilities and investments based on value, risk, dependencies, and impact on development teams .
- Drive the evolution of capabilities including SAST, SCA, IaC, secrets, containers, and DAST/fuzzing , as well as their integration with GitHub, Azure DevOps, TFVC, and delivery pipelines.
- Advance visibility and traceability of application assets , including inventory, repositories, applications, their owners, and SBoM.
- Evolve vulnerability consolidation and contextualization , risk-based prioritization, and mechanisms for teams to focus efforts on the most significant risks.
- Inform capabilities to accelerate remediation and automation , including automated remediation PRs, exception management, and dependency evergreening.
- Evolve SLAs, metrics, gating mechanisms, and control effectiveness metrics to make visible the exposure, deviations, and adoption of DevSecOps practices.
- Align with dependent initiatives and platforms, including CMDB/ServiceNow, GitHub, Azure DevOps, and SDLC security capabilities . The CMDB is explicitly intended to contextualize assets, managers, and exposure.
- Work with Product Owners, architects, safety experts, and delivery teams to transform product directions into capabilities and value increments , while maintaining a cross-functional vision.
📌 DevSecops Consulant (Quebec City)
🏢 Experis Canada
📍 Quebec City