Senior SecOps Consultant - Afternoon Shift

About the role

10Pearls, a global digital engineering partner, is looking for a Software Consultant (SecOps) to strengthen its internal security capabilities. The consultant drives security testing automation, executes security roadmap initiatives and maintains audit-ready security evidence. The role works closely with engineering teams; the annual external penetration test and independent attestation remain the responsibility of a third-party provider.

Key responsibilities

• Design, develop and maintain automated security testing processes and tools, including scripting and reporting
• Integrate security testing and validation into CI/CD pipelines and DevOps workflows, configuring security gates and scan thresholds
• Implement and maintain SAST, DAST, SCA and vulnerability scanning tools
• Identify, assess, prioritize, track and coordinate the remediation of vulnerabilities with engineering and infrastructure teams, including validation
• Maintain audit-ready evidence of testing, controls, remediation and security initiatives
• Support internal security controls, policies and procedures, and collaborate with developers and DevOps to embed security in the SDLC
• Prepare security reports on testing results, vulnerability trends, remediation progress and roadmap milestones
• Coordinate internal preparation for the annual external penetration test and follow-up on findings

Required profile

• 5+ years of experience in application security, DevSecOps, security engineering or a related field
• Bachelor's degree in Computer Science, Software Engineering, Cybersecurity or a related field
• Hands-on experience automating security testing and integrating security tools into CI/CD pipelines
• Experience preparing technical documentation, security reports and audit evidence
• Familiarity with scripting or programming languages such as Python or Bash

Required skills

• SAST, DAST, SCA and vulnerability scanning
• Vulnerability assessment, risk prioritization and remediation tracking
• Cloud environments, infrastructure security and modern software delivery practices
• Preferred: AWS, Azure or GCP, container security, IaC scanning, secrets detection, ISO 27001, SOC 2, OWASP, and Agile experience