{"id":3337566,"url":"https://alion.io/job/youriteams-devsecops-and-vulnerability-management-engineer","title":"DevSecOps and Vulnerability Management Engineer","company":{"id":4441827,"name":"YourITeams","domain":"youriteams.com","url":"https://alion.io/company/youriteams","size_band":"201-500","is_staffing_agency":true,"employer_type":"agency","is_intermediary":false,"listed_via":null,"ats_vendor":"Traffit","truth_index":null},"role":"Security","role_family":"Security","seniority":"senior","employment_type":null,"work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"inferred_company_offices","remote_working_hours":null,"hiring_geo_confidence":"inferred","locations":[],"countries":[],"hiring_countries":["PL"],"hiring_countries_total":1,"salary":null,"salary_estimate":{"min_usd":96000,"max_usd":199000,"period":"year","method":"global_role_seniority_cell","sample_n":2372},"experience_years_min":8,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":".NET","optional":false},{"name":"Agile","optional":false},{"name":"ArgoCD","optional":false},{"name":"AWS","optional":false},{"name":"Azure DevOps","optional":false},{"name":"CI/CD","optional":false},{"name":"CVSS","optional":false},{"name":"Datadog","optional":false},{"name":"DefectDojo","optional":false},{"name":"EPSS","optional":false},{"name":"GitHub Actions","optional":false},{"name":"Groovy","optional":false},{"name":"Helm","optional":false},{"name":"Java","optional":false},{"name":"Jenkins","optional":false},{"name":"KEV","optional":false},{"name":"Kubernetes","optional":false},{"name":"Node JS","optional":false},{"name":"PHP","optional":false},{"name":"Platform Engineering","optional":false},{"name":"Power BI","optional":false},{"name":"Ruby","optional":false},{"name":"SBOM","optional":false},{"name":"Sigstore","optional":false},{"name":"SLSA","optional":false},{"name":"TypeScript","optional":false},{"name":"Azure","optional":true},{"name":"C#","optional":true},{"name":"JavaScript","optional":true}],"status":"live","first_seen_at":"2026-10-27T14:06:10Z","employer_posted_date":"2026-10-27","last_verified_at":"2026-10-30T18:24:40Z","board_verified":true,"closed_at":null,"days_open":3,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":3},"description":"We are seeking an experienced DevSecOps and Vulnerability Management Engineer to strengthen security practices across development pipelines, cloud infrastructure, and vulnerability management processes. The person in this role will join a newly formed security team supporting a US-based SaaS provider whose platform serves hundreds of public-sector agencies across North America. The role focuses on assessing and improving CI/CD security, establishing unified vulnerability triage and tracking, and delivering clear metrics and reporting to senior leadership.\nResponsibilities\nAssess existing CI/CD pipelines and tools, including GitHub Actions, Jenkins (Groovy), ArgoCD, Helm, and AWS CodePipeline, and evaluate the effectiveness of currently implemented security scanning tools.\nDesign and implement a unified vulnerability triage process to consolidate findings, remove duplicates, and prioritize risks using CVSS, EPSS, CISA KEV, and exploitability/reachability indicators.\nImplement end-to-end vulnerability tracking to ensure each finding has an assigned owner and a documented resolution status (remediated, contained, or risk-accepted).\nIntegrate SAST, software composition analysis (SCA), secrets detection, container security, and infrastructure-as-code scanning into CI/CD pipelines, and establish security gates to prevent regression.\nDefine and enforce branch management and repository hygiene practices to reduce accumulated vulnerabilities and control the growth of security findings.\nProduce regular vulnerability management reports and progress metrics for the CISO and senior leadership, including accurate weekly reporting.\nDuring Phase 2, lead cloud and infrastructure engineering activities and vulnerability management operations within the DevOps team.\nCoordinate remediation activities across engineering teams and translate technical findings into clear, actionable information for non-technical stakeholders.\nQualifications\nApproximately 8+ years of experience in DevOps or platform engineering, with substantial practical DevSecOps expertise.\nProven experience implementing automated CI/CD security gates using GitHub Actions or Jenkins.\nHands-on experience managing vulnerabilities at scale, including aggregation, deduplication, risk-based prioritization, and remediation tracking.\nStrong understanding of vulnerability scoring and prioritization frameworks, including CVSS, EPSS, and CISA KEV.\nDemonstrated ability to prepare reliable, concise reporting that communicates risk and progress to senior management and non-technical stakeholders.\nCapacity to coordinate cross-team security remediation and to lead technical initiatives during cloud and infrastructure phases.\nPreferred: experience with vulnerability aggregation platforms such as DefectDojo; container and Kubernetes security expertise; knowledge of SBOM, software supply chain security practices (SLSA, Sigstore); familiarity with Azure DevOps or AWS CodePipeline; experience building dashboards or security reporting in Power BI or Datadog.\nComfortable working in environments that use Java, .NET, Node.js/TypeScript, Ruby, and PHP.\nBenefits\nOpportunity to join and shape a dedicated security team for a high-impact SaaS provider serving public-sector clients across North America.\nRemote work\nUnique TEAL culture that values relationships and respect in a non-corporate atmosphere.\nAgile approach with minimal bureaucracy to help you move quickly and deliver value.\nOutstanding integration trips to various places in Europe.\nActivities to support well-being and health.\nLuxmed Gold Extended medical care and Multisport Plus benefit.","description_format":"text","description_chars":3630,"description_truncated":false,"requirements":{"experience_years_min":8,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[{"name":"Poland","iso":"PL","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Endpoint Security","Information Security","DevSecOps","Security Operations"],"lifecycle":[{"event":"open","at":"2026-10-27T14:23:31Z"}],"visa":[],"liveness":{"score":54,"band":"ok","label":"Likely open","p_open":1,"p_active":0.542,"p_room":1,"age_days":2,"expected_fill_days":54,"reasons":["conf:0","agency","velocity","win:early"],"computed_at":"2026-10-30T05:48:23Z"},"pay":null,"html_url":"https://alion.io/job/youriteams-devsecops-and-vulnerability-management-engineer","json_url":"https://alion.io/job/youriteams-devsecops-and-vulnerability-management-engineer.json","meta":{"generated_at":"2026-10-30T20:40:28Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":10747,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-31T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":4441827},"rest":"https://alion.io/mcp/rest/get_company?id=4441827"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fyouriteams-devsecops-and-vulnerability-management-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fyouriteams-devsecops-and-vulnerability-management-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fyouriteams-devsecops-and-vulnerability-management-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/youriteams-devsecops-and-vulnerability-management-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fyouriteams-devsecops-and-vulnerability-management-engineer"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3337566}},{"tool":"search_jobs","arguments":{"company":"youriteams.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3337566},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}