Job Description

DevSecOps Engineer -Remote

No 3rd PARTIES or Sponsorships at this point

100% Remote

Great Company

*4 Month Project

*Hands-on experience in GitLab security scanning, vulnerability scanning, and SBOM management. This is the biggest skill set!!

*MUST be very professional and have great communication skills-Client facing position!

*This is a VERY Sr Level position. You must have perfect experience doing this work.

Client is seeking a DevSecOps Engineer to establish and operationalize a vulnerability management program within GitLab. The selected resource will build processes, standards, and automation around vulnerability scanning, SBOM generation, dependency scanning, and container security, then transition ownership to the internal DevOps team at the conclusion of the engagement.

This role will focus on standardizing security scanning across projects, reducing false positives, building remediation workflows, automating dependency management, supporting SBOM generation, and documenting processes for long-term operational support. Fixing application vulnerabilities is out of scope; application teams will own remediation efforts.

Skills Must Have

• Hands-on GitLab CI/CD pipeline authoring
• GitLab security features (SAST, dependency scanning, container scanning, security policies, vulnerability reporting)
• Experience building a vulnerability management program
• Vulnerability triage processes
• Remediation workflow development
• Severity-based remediation timelines
• Security exception management
• SBOM generation
• Dependency scanning
• Container image scanning
• Experience documenting operational processes and procedures