Department Manager - DevSecOps Security

This role manages the day-to-day operations and continuous improvement of CP Axtra's security testing platforms, including Checkmarx, SonarQube, Qualys WAS, OWASP ZAP, and Spectral. The manager ensures these tools are integrated into every CI/CD pipeline to provide high signal and low noise. Responsibilities include tuning scan policies, onboarding new repositories, troubleshooting pipeline integrations, and training developers. The role also extends coverage into container security and infrastructure-as-code scanning as the company's cloud-native footprint grows. Success is defined by developers trusting the tools and acting on actionable findings.

The position requires owning execution alongside the Application Security Lead. Key duties involve tuning scan policies, onboarding new repositories, troubleshooting pipeline integrations, and training developers on interpreting results. The manager must continuously reduce false positive rates and extend coverage into container security and infrastructure-as-code scanning. The role focuses on making security tools genuinely useful and seamlessly integrated into development workflows.

Manage day-to-day operations and continuous improvement of security testing platforms

Tune scan policies and reduce false positive rates

Onboard new repositories and troubleshoot pipeline integrations

Train developers on interpreting security results

Extend coverage into container security and infrastructure-as-code scanning

Ensure tools are integrated into every CI/CD pipeline

5+ years of experience managing DevSecOps or application security testing platforms in a production environment

Hands-on expertise with at least 2 of: Checkmarx, SonarQube, Snyk, Veracode, or Fortify

Experience integrating security scanning into CI/CD pipelines

Strong understanding of DAST tools and web application scanning

Ability to tune scan policies and write custom rules

Working knowledge of container security scanning and IaC scanning

Clear communication skills for working with developers

Unknown