About 10Pearls
10Pearls is a global, purpose-driven AI-Native digital engineering partner helping businesses re-imagine, digitalize, and accelerate. As an end-to-end digital technology partner, 10Pearls helps businesses create future-proof, transformative digital products that leverage emerging technologies. 10Pearls' clients include Global 2000 enterprises, high growth mid-size businesses, and some of the most exciting start-ups from industries like healthcare, fintech, energy, education, real estate, retail, and hi-tech. Headquartered in the Washington DC metro area, 10Pearls has product engineering and software development centers in North America, Latin America, Europe, and South Asia. To learn more, visit
Role Overview
10Pearls is seeking a Software Consultant (SecOps) to drive internal security testing automation, execute security roadmap initiatives, and maintain audit-ready security evidence. The ideal candidate will have hands-on experience in application security, DevSecOps, vulnerability management, and integrating security practices into software development workflows.
This role focuses on strengthening internal security capabilities through automation, continuous improvement, and collaboration with engineering teams. The annual external penetration test and independent attestation will remain the responsibility of a third-party provider.
Responsibilities
- Design, develop, and maintain automated security testing processes and tools for applications and software development workflows, including scripting and automation of security testing and reporting.
- Execute security roadmap initiatives and drive the implementation of planned security improvements.
- Integrate security testing and validation into CI/CD pipelines and DevOps workflows, including configuring security gates and scan thresholds.
- Implement and maintain security testing tools, including Static Application Security Testing (SAST), Dynamic Application Security Testing (DAST), Software Composition Analysis (SCA), and vulnerability scanning solutions.
- Identify, assess, prioritize, track, and coordinate the remediation of security vulnerabilities in collaboration with engineering and infrastructure teams, including remediation validation and risk-based prioritization.
- Maintain audit-ready evidence of security testing, implemented controls, remediation activities, and ongoing security initiatives.
- Support the implementation, monitoring, and continuous improvement of internal security controls, policies, and procedures.
- Collaborate with software developers, DevOps, and infrastructure teams to embed security best practices throughout the Software Development Life Cycle (SDLC).
- Prepare security reports covering testing results, vulnerability trends, remediation progress, and roadmap milestones, including security testing coverage and remediation SLA compliance.
- Identify opportunities to improve security testing coverage, automation efficiency, and the overall effectiveness of security operations.
- Coordinate internal preparation and follow-up activities for the annual external penetration test, including tracking remediation of findings and maintaining supporting documentation. The external assessment and formal attestation will be performed by a third party.
Requirements
- 5+ years of relevant experience in application security, DevSecOps, security engineering, or a related field.
- Bachelor's degree in Computer Science, Software Engineering, Cybersecurity, or a related field.
- Experience in application security, DevSecOps, security engineering, or a related technical role.
- Hands-on experience automating security testing and integrating security tools into CI/CD pipelines.
- Strong understanding of application security principles, secure software development practices, and common application vulnerabilities.
- Experience with security testing tools and methodologies, including SAST, DAST, SCA, and vulnerability scanning.
- Understanding of vulnerability assessment, risk prioritization, and remediation tracking.
- Experience preparing technical documentation, security reports, and audit evidence.
- Familiarity with scripting or programming languages such as Python, Bash, or similar.
- Understanding of cloud environments, infrastructure security, and modern software delivery practices.
- Strong analytical, problem-solving, communication, and collaboration skills.
Preferred Qualifications
- Experience with cloud security across AWS, Azure, or GCP.
- Exposure to container security, infrastructure-as-code scanning, and secrets detection.
- Familiarity with security frameworks and standards such as ISO 27001, SOC 2, and OWASP.
- Experience supporting security audits or coordinating with external penetration testing providers.
- Knowledge of security automation tools and emerging DevSecOps practices.
- Relevant cybersecurity, cloud security, or information security certifications.
- Experience working with cross-functional engineering teams in Agile environments.
#J-18808-Ljbffr
