DevSecOps Manager

We are seeking a DevSecOps Manager to lead the team securing Tekion's cloud infrastructure, container platforms, and CI/CD pipelines. You will manage a team of 5-8 engineers, own the roadmap for delivery commitments, and ensure robust security posture across all deployment platforms.

This is a leadership role focused on people management and strategic delivery rather than daily coding. Your success depends on growing your team's quality, velocity, and measurable improvements in security outcomes while earning the trust of senior engineering staff.

Key Responsibilities:

• Team Leadership: Lead hiring for DevSecOps roles, define leveling structures, run high-signal interviews, develop engineers toward senior scope, manage performance cycles fairly, and foster a psychologically safe environment focused on risk transparency and retention.

• Delivery Excellence: Own the team roadmap by translating security strategy into sequenced plans. Manage planning rituals to ensure predictable delivery, prioritize between remediation and investment, resolve cross-team dependencies with Cloud Security/SRE teams, and report metrics including vulnerability SLAs and mean time to detect.

• Security Program: Account for the security posture of AWS/Azure infrastructure, Kubernetes clusters, and CI/CD toolchains. Drive a shift-left program embedding automated testing (SAST/DAST), IaC scanning, and dependency checks into development lifecycles. Own vulnerability lifecycle management from intake to remediation. Ensure compliance readiness for SOC 2, ISO 27001, PCI-DSS, and GDPR.

• Operational Resilience: Lead security incident response as commander or escalation point. Enforce blameless post-mortems for systemic improvement. Maintain detection coverage with quality alerts and complete runbooks.

• Technical Authority: Review architecture proposals, make consequential technical decisions without becoming a bottleneck, evaluate tooling vendors (Build vs Buy), represent the team to leadership/auditors, and partner on security-first culture across engineering teams.

Requirements:

• Bachelor's degree in CS or equivalent experience.
• 10+ years in DevSecOps, Infrastructure Security, or Security Engineering.
• 3+ years managing engineers with proven hiring and career development skills; prior senior IC background required.
• Expert knowledge of AWS/GCP/Azure, Docker/Kubernetes, Jenkins/Tekton/GitHub Actions/ArgoCD.
• Solid grasp of secure infrastructure design, IAM, network security, and IaC practices.

Preferred:

• Experience managing DevSecOps teams specifically in multi-tenant SaaS environments with regulated data (automotive/consumer).
• Certifications like CISSP, CCSP, CKS, or AWS Certified Security - Specialty.