Details:
Stefanini Group is hiring!
Stefanini is looking for DevSecOps Security Advisor-Remote
For quick apply, please contact Sudhanshu Shrivastava; Ph: 248 582 6510
Sudhanshu.shrivastava@stefanini.com
W2 Candidates Only
Position Overview:
As a DevSecOps Assessment Information Security Advisor, where you''ll drive the evolution of continuous assurance and modern security practices. This blended role combines advanced security assessment, DevSecOps enablement, and strategic advisory to shape secure-by-design pipelines and platforms. You''ll partner with engineering teams, automate evidence and reporting workflows, and deliver actionable risk insights to leadership.
Key Responsibilities:
- Lead activities to embed secure-by-design practices across DevSecOps pipelines.
- Assess automation opportunities, build and integrate security automation, and deliver data-driven risk insights.
- Design, build, and operationalize AI agents for evidence triage, control mapping, and developer support.
- Enforce secure prompt and skill management, role-based access controls, and audit trails.
- Integrate agents with enterprise systems (ticketing, CI/CD, knowledge bases) via secure APIs.
- Map automated controls and agent workflows to priority NIST SP 800-53 Rev 5 and FedRAMP requirements.
- Deliver FedRAMP-ready artifacts and processes, including continuous monitoring and compliance dashboards.
- Partner with engineering to implement SAST/DAST, infrastructure-as-code checks, and vulnerability scanning within CI/CD.
- Develop APIs to orchestrate security scanning workflows and automate evidence capture.
- Manage private certificate authorities and automate code signing for secure build and release processes.
- Translate technical findings into decision-ready insights for leadership and risk committees.
- Co-design automated, analytics-driven processes to reduce manual effort and enhance transparency.
- Mentor peers, promote reusable code libraries, and propagate best practices across the DevSecOps community.