Job Reference:

6134 DevSecOps Architect We're partnering with a global hospitality organization undergoing a significant digital transformation. They're looking for a hands-on DevSecOps Architect to build and mature their enterprise Secure Software Development Lifecycle (SDLC) program and embed security throughout software development. This isn't a traditional application security role. We're looking for someone who enjoys building security into CI/CD pipelines, developing secure engineering standards and working directly with development teams. What we're looking for Strong DevSecOps and application security experience, including designing and implementing Secure SDLC programs. Hands-on experience integrating SAST, DAST, SCA, secrets scanning and automated security gates into CI/CD pipelines. Experience with GitHub Actions, GitLab CI/CD, Jenkins or similar platforms. Strong understanding of infrastructure as code, Azure/AWS cloud security and container/Kubernetes security. Software engineering or scripting experience using Python, PowerShell, Go or similar languages. Excellent communication skills, with the ability to influence developers, architects and senior stakeholders. Why consider this opportunity? Join an established enterprise investing heavily in cybersecurity modernization. You'll have the opportunity to shape its DevSecOps strategy, introduce security automation and establish secure development practices across multiple engineering teams, including emerging AI-assisted development technologies.

Location:

Hollywood, Florida (five days onsite)

Salary:

Competitive, depending on experience

Employment:

Permanent, direct hire Tiro Security is a specialist in Cyber Security staffing and professional services company. Formed in 2012, headquartered on the West Coast and helping clients all over the USA, Cyber Security is ALL we do. Tiro Security is extremely active in the cybersecurity industry and regularly speaks as experts on staffing, careers, and retaining talent at major conferences including

DEFCON, ISC2

Congress, ShellCon, BSides, and RSA