Senior SecOps Consultant - Afternoon Shift

Overview 10Pearls is seeking a Software Consultant (SecOps) to drive internal security testing automation, execute security roadmap initiatives, and maintain audit-ready security evidence. The ideal candidate will have hands-on experience in application security, DevSecOps, vulnerability management, and integrating security practices into software development workflows.

About 10Pearls

About 10Pearls 10Pearls is a global, purpose-driven AI-Native digital engineering partner helping businesses re-imagine, digitalize, and accelerate.

As an end-to-end digital technology partner, 10Pearls helps businesses create future-proof, transformative digital products that leverage emerging technologies.

10Pearls' clients include Global 2000 enterprises, high growth mid-size businesses, and some of the most exciting start-ups from industries like healthcare, fintech, energy, education, real estate, retail, and hi-tech.

Headquartered in the Washington DC metro area, 10Pearls has product engineering and software development centers in North America, Latin America, Europe, and South Asia.

To learn more, visit.

Responsibilities

• This role focuses on strengthening internal security capabilities through automation, continuous improvement, and collaboration with engineering teams.
• The annual external penetration test and independent attestation will remain the responsibility of a third-party provider.
• Design, develop, and maintain automated security testing processes and tools for applications and software development workflows, including scripting and automation of security testing and reporting.
• Execute security roadmap initiatives and drive the implementation of planned security improvements.
• Integrate security testing and validation into CI/CD pipelines and DevOps workflows, including configuring security gates and scan thresholds.
• Implement and maintain security testing tools, including Static Application Security Testing (SAST), Dynamic Application Security Testing (DAST), Software Composition Analysis (SCA), and vulnerability scanning solutions.
• Identify, assess, prioritize, track, and coordinate the remediation of security vulnerabilities in collaboration with engineering and infrastructure teams, including remediation validation and risk-based prioritization.
• Maintain audit-ready evidence of security testing, implemented controls, remediation activities, and ongoing security initiatives.
• Support the implementation, monitoring, and continuous improvement of internal security controls, policies, and procedures.
• Collaborate with software developers, DevOps, and infrastructure teams to embed security best practices throughout the Software Development Life Cycle (SDLC).
• Prepare security reports covering testing results, vulnerability trends, remediation progress, and roadmap milestones, including security testing coverage and remediation SLA compliance.
• Identify opportunities to improve security testing coverage, automation efficiency, and the overall effectiveness of security operations.
• Coordinate internal preparation and follow-up activities for the annual external penetration test, including tracking remediation of findings and maintaining supporting documentation.
• The external assessment and formal attestation will be performed by a third party.
• Requirements 5+ years of relevant experience in application security, DevSecOps, security engineering, or a related field.
• Hands-on experience automating security testing and integrating security tools into CI/CD pipelines.
• Strong understanding of application security principles, secure software development practices, and common application vulnerabilities.
• Experience with security testing tools and methodologies, including SAST, DAST, SCA, and vulnerability scanning.
• Understanding of vulnerability assessment, risk prioritization, and remediation tracking.
• Experience preparing technical documentation, security reports, and audit evidence.

Requirements

• Bachelor's degree in Computer Science, Software Engineering, Cybersecurity, or a related field.
• Experience in application security, DevSecOps, security engineering, or a related technical role.
• Familiarity with scripting or programming languages such as Python, Bash, or similar.
• Understanding of cloud environments, infrastructure security, and modern software delivery practices.
• Strong analytical, problem-solving, communication, and collaboration skills.

Preferred

• Qualifications Experience with cloud security across AWS, Azure, or GCP.
• Exposure to container security, infrastructure-as-code scanning, and secrets detection.
• Familiarity with security frameworks and standards such as ISO 27001, SOC 2, and OWASP.
• Experience supporting security audits or coordinating with external penetration testing providers.
• Knowledge of security automation tools and emerging DevSecOps practices.
• Relevant cybersecurity, cloud security, or information security certifications.
• Experience working with cross-functional engineering teams in Agile environments.