Devsecops Security Consultant

Insight Global is looking for a Devsecops Consultant to assist with the security service management team. This consultant should have experience with running a proof of concept (POC) with an external vendor, and have experience setting up the rules/KPI's of that POC. The POC they could have familiarity with could be for a service or a security tool. They will work hand and hand with the hands on security team to ensure the way in which devsecops is operating day-to-day is the best and most efficient within it's practice. They may make recommendations for changes for processes, tools, methodologies...etc. to better enhance the program.

We are a company committed to creating diverse and inclusive environments where people can bring their full, authentic selves to work every day. We are an equal opportunity/affirmative action employer that believes everyone matters. Qualified candidates will receive consideration for employment regardless of their race, color, ethnicity, religion, sex (including pregnancy), sexual orientation, gender identity and expression, marital status, national origin, ancestry, genetic factors, age, disability, protected veteran status, military or uniformed service member status, or any other status or characteristic protected by applicable laws, regulations, and ordinances. If you need assistance and/or a reasonable accommodation due to a disability during the application or recruiting process, please send a request to HR@insightglobal.com.To learn more about how we collect, keep, and process your private information, please review Insight Global's Workforce Privacy Policy: https://insightglobal.com/workforce-privacy-policy/.

- 7+ years of experience working within Cybersecurity at large enterprises
- Recent 3+ years of DevSecOps experience within a large enterprise environment, with a proven track record of integrating security into software development lifecycles and driving security initiatives across complex technology ecosystems.
- Hands-on experience with application security testing and security scanning technologies, including:
Static Application Security Testing (SAST)
Dynamic Application Security Testing (DAST)
Software Composition Analysis (SCA)
Vulnerability scanning and security assessment tools
- Strong understanding of DevSecOps and CI/CD pipeline security, including embedding automated security controls, scanning, and governance into modern development pipelines to identify and remediate vulnerabilities throughout the software development lifecycle.
- Knowledge of Snyk and similar security tooling, including implementation, configuration, optimization, reporting, and integration with development workflows and CI/CD platforms.
- Demonstrated experience leading and executing Proofs of Concept (POCs), including:
- Defining business and technical requirements
Establishing success criteria and KPIs
Planning and executing testing strategies
Evaluating results and presenting recommendations
Supporting solution selection and implementation decisions
- Knowledge of Artificial Intelligence (AI) security concepts and emerging technologies, including:
Large Language Models (LLMs)
AI Agents
Model Context Protocols (MCPs)
AI application architectures and associated security risks
- Ability to run a POC for AI to assess and validate AI security solutions, including defining AI security scanning requirements, evaluating AI-specific security controls, and testing AI functionality against business, security, and compliance requirements.
- Ability to translate business and security requirements into technical solutions, while balancing risk, scalability, developer experience, and operational efficiency.
- Experience developing security standards, requirements, and governance processes related to application security, cloud security, DevSecOps, and AI security initiatives.

Benefit packages for this role will start on the 1st day of employment and include medical, dental, and vision insurance, as well as HSA, FSA, and DCFSA account options, and 401k retirement account access with employer matching. Employees in this role are also entitled to paid sick leave and/or other paid time off as provided by applicable law.