Senior SecOps Consultant - Afternoon Shift

10Pearls is a global, purpose-driven AI-native digital engineering partner that helps businesses re-imagine, digitalize, and accelerate their operations. As an end-to-end digital technology partner, 10Pearls creates future-proof, transformative digital products by leveraging emerging technologies. Their clientele includes Global 2000 enterprises, high-growth mid-size businesses, and innovative start-ups across various industries such as healthcare, fintech, energy, education, real estate, retail, and hi-tech. Headquartered in the Washington DC metro area, 10Pearls operates product engineering and software development centers across North America, Latin America, Europe, and South Asia.

The company is seeking a Software Consultant (SecOps) to lead internal security testing automation, execute security roadmap initiatives, and maintain audit-ready security evidence. This role is essential for enhancing internal security capabilities through automation, continuous improvement, and collaboration with engineering teams. While the annual external penetration test and independent attestation are handled by a third-party provider, this position will coordinate internal preparation and follow-up activities.

Key Responsibilities

- Design, develop, and maintain automated security testing processes and tools for applications and software development workflows, including scripting and automation of security testing and reporting.
- Execute security roadmap initiatives and drive the implementation of planned security improvements.
- Integrate security testing and validation into CI/CD pipelines and DevOps workflows, including configuring security gates and scan thresholds.
- Implement and maintain security testing tools such as Static Application Security Testing (SAST), Dynamic Application Security Testing (DAST), Software Composition Analysis (SCA), and vulnerability scanning solutions.
- Identify, assess, prioritize, track, and coordinate remediation of security vulnerabilities in collaboration with engineering and infrastructure teams, including remediation validation and risk-based prioritization.
- Maintain audit-ready evidence of security testing, implemented controls, remediation activities, and ongoing security initiatives.
- Support the implementation, monitoring, and continuous improvement of internal security controls, policies, and procedures.
- Collaborate with software developers, DevOps, and infrastructure teams to embed security best practices throughout the Software Development Life Cycle (SDLC).
- Prepare security reports covering testing results, vulnerability trends, remediation progress, and roadmap milestones, including security testing coverage and remediation SLA compliance.
- Identify opportunities to improve security testing coverage, automation efficiency, and overall effectiveness of security operations.
- Coordinate internal preparation and follow-up activities for the annual external penetration test, including tracking remediation of findings and maintaining supporting documentation.

Required Qualifications

- Minimum of 5 years of relevant experience in application security, DevSecOps, security engineering, or a related field.
- Bachelor’s degree in Computer Science, Software Engineering, Cybersecurity, or a related discipline.
- Hands-on experience automating security testing and integrating security tools into CI/CD pipelines.
- Strong understanding of application security principles, secure software development practices, and common application vulnerabilities.
- Proficiency with security testing tools and methodologies, including SAST, DAST, SCA, and vulnerability scanning.
- Experience in vulnerability assessment, risk prioritization, and remediation tracking.
- Ability to prepare technical documentation, security reports, and audit evidence.
- Familiarity with scripting or programming languages such as Python, Bash, or similar.
- Understanding of cloud environments, infrastructure security, and modern software delivery practices.
- Excellent analytical, problem-solving, communication, and collaboration skills.

Preferred Qualifications

- Experience with cloud security on platforms such as AWS, Azure, or Google Cloud Platform.
- Exposure to container security, infrastructure-as-code scanning, and secrets detection.
- Familiarity with security frameworks and standards including ISO 27001, SOC 2, and OWASP.
- Experience supporting security audits or coordinating with external penetration testing providers.
- Knowledge of security automation tools and emerging DevSecOps practices.
- Relevant cybersecurity, cloud security, or information security certifications.
- Experience working with cross-functional engineering teams in Agile environments.

This role offers the opportunity to significantly impact the security posture of a dynamic, innovative company while working with cutting-edge technologies and diverse teams globally.