Manager - Lead DevSecOps

About the Job:
To execute the DevSecOps plan by embedding security into every phase of the software development lifecycle, ensuring secure, scalable, and efficient delivery of digital solutions.

Key Accountabilities:

1. DevSecOps Management

   • Define and standardize DevSecOps frameworks to ensure consistent security integration across development and operations teams.
   • Create policies, controls, and KPIs to measure DevSecOps maturity and effectiveness.
   • Align DevSecOps initiatives with business and cybersecurity strategies for executive sponsorship and long-term sustainability.
   • Drive adoption through planning, stakeholder engagement, and change management.
   • Report high-level DevSecOps metrics, risks, and progress to enable informed decision-making.
   • Proactively implement feedback loops with stakeholders to continuously refine practices and address emerging needs.

2. Integration Management

   • Embed security controls and automated checks into CI/CD pipelines for early detection and remediation of vulnerabilities.
   • Define secure coding standards and enforce them through automated tools and peer reviews.
   • Conduct threat modeling, code analysis, and security assessments at each phase to proactively identify and mitigate risks.
   • Integrate security checkpoints into agile ceremonies to ensure continuous validation.

3. Automation

   • Implement DevSecOps tools to support code scanning, container security, and infrastructure validation.
   • Integrate tools into development workflows to provide real-time feedback and enforce security policies.
   • Standardize tool utilization across teams to ensure consistency, reduce operational overhead, and improve visibility.
   • Automate security testing and compliance checks to accelerate delivery without compromising quality.

4. Risk & Compliance

   • Identify risk and mitigation processes within DevSecOps pipelines for proactive threat management.
   • Comply with internal policies and external regulations with automated validation and reporting.
   • Maintain audit readiness by documenting controls, evidence, and remediation actions.
   • Conduct regular compliance reviews and risk assessments to identify gaps and implement continuous improvement.

Skills Required:

• DevSecOps
• Secure SDLC
• CI/CD
• Cloud Security
• Risk Management
• Agile/DevOps
• Tools: Snyk, SonarQube, Aqua, HashiCorp

Education:
Bachelor’s degree in Computer Science, Computer Application, Information Technology, or a related field.

Location:
Jiddah, Makkah, Saudi Arabia

Work Conditions:
On-site