DevSecOps Information Security Advisor

This blended role combines advanced security assessment, DevSecOps enablement, and strategic advisory to shape secure-by-design pipelines and platforms. Experience building and deploying AI agents (RAG, orchestration, tool/function calling) in regulated environments.

Job title: - DevSecOps Information Security Advisor
Location: - Richmond, VA 23219
Duration: - 18 Months
Pay rate:- $80/hr - $100/hr on W2.
 
Position Overview

• As a DevSecOps Assessment Information Security Advisor, where you’ll drive the evolution of continuous assurance and modern security practices.
• This blended role combines advanced security assessment, DevSecOps enablement, and strategic advisory to shape secure-by-design pipelines and platforms.
• You’ll partner with engineering teams, automate evidence and reporting workflows, and deliver actionable risk insights to leadership.

 
Key Responsibilities

• Lead activities to embed secure-by-design practices across DevSecOps pipelines.
• Assess automation opportunities, build and integrate security automation, and deliver data-driven risk insights.
• Design, build, and operationalize AI agents for evidence triage, control mapping, and developer support.
• Enforce secure prompt and skill management, role-based access controls, and audit trails.
• Integrate agents with enterprise systems (ticketing, CI/CD, knowledge bases) via secure APIs.
• Map automated controls and agent workflows to priority NIST SP 800-53 Rev 5 and FedRAMP requirements.
• Deliver FedRAMP-ready artifacts and processes, including continuous monitoring and compliance dashboards.
• Partner with engineering to implement SAST/DAST, infrastructure-as-code checks, and vulnerability scanning within CI/CD.
• Develop APIs to orchestrate security scanning workflows and automate evidence capture.
• Manage private certificate authorities and automate code signing for secure build and release processes.
• Translate technical findings into decision-ready insights for leadership and risk committees.
• Co-design automated, analytics-driven processes to reduce manual effort and enhance transparency.
• Mentor peers, promote reusable code libraries, and propagate best practices across the DevSecOps community.

 
Qualifications Required

• Bachelor’s degree in information security, Computer Science, or a related field.
• 5–7 years of experience in information security, risk management, audit, or cyber operations.
• Advanced knowledge of security principles, assessment methodologies, and cloud environments (AWS/Azure).
• Hands-on experience with automation platforms, continuous monitoring tools, and analytics technologies.
• Strong analytical, communication, facilitation, and negotiation skills.

 
Preferred:

• Professional certifications (CISSP, CISA, CRISC).
• Demonstrated success enabling DevSecOps at scale, including security testing automation and policy development.
• Experience administering code repositories and build systems across CI/CD pipelines.
• Experience building and deploying AI agents (RAG, orchestration, tool/function calling) in regulated environments.
• Direct experience with NIST SP 800-53 Rev 5 and FedRAMP, including OSCAL artifact management and GRC ingestion.

 
Technical Proficiencies

• AWS and Azure cloud platforms.
• Source control and developer platforms.
• Vulnerability, compliance, and quality scanning tools.
• SAST/DAST and infrastructure-as-code tooling.

Performance Indicators

• Achieve at least a 30% reduction in manual evidence preparation through automation and AI assistants.
• Decrease assessment cycle time by 25% while maintaining audit quality.
• Deploy production-ready AI agents with 90% accuracy on scoped tasks and measurable deflection of routine queries.
• Operationalize FedRAMP 20X OSCAL ingestion with auditable traceability to GRC dashboards.