{"schemaVersion":"jobsearcher.job.v1","id":"8b67beb0f11ce4e820ec3052","url":"https://jobsearcher.com/jobs/8b67beb0f11ce4e820ec3052","canonicalUrl":"https://jobsearcher.com/jobs/8b67beb0f11ce4e820ec3052","title":"DevSecOps Engineer -Remote","description":"DevSecOps Engineer -RemoteNo 3rd PARTIES or Sponsorships at this point100% RemoteGreat CompanyUnlimited Growth*4 Months*MUST be very professional and have great communication skills-Client facing position*This is a VERY Sr Level and Specific Skill Set- Read Closely*You MUST have done all this!! NOT I can do it, but I am currently doing it or did it at my last position.Client is seeking a DevSecOps Engineer to establish and operationalize a vulnerability management program within GitLab. The selected resource will build processes, standards, and automation around vulnerability scanning, SBOM generation, dependency scanning, and container security, then transition ownership to the internal DevOps team at the conclusion of the engagement.This role will focus on standardizing security scanning across projects, reducing false positives, building remediation workflows, automating dependency management, supporting SBOM generation, and documenting processes for long-term operational support. Fixing application vulnerabilities is out of scope; application teams will own remediation efforts.Skills Must HaveHands-on GitLab CI/CD pipeline authoringGitLab security features (SAST, dependency scanning, container scanning, security policies, vulnerability reporting)Experience building a vulnerability management programVulnerability triage processesRemediation workflow developmentSeverity-based remediation timelinesSecurity exception managementSBOM generationDependency scanningContainer image scanningExperience documenting operational processes and proceduresSkills Nice to HaveExperience with dependency management tooling such as RenovateExperience with AWS ECSExperience with Elixir/HexExperience with Node.jsExperience with RubyExperience with Lucee/CFML on the JVMCycloneDX SBOM experienceSPDX SBOM experienceExperience supporting SOC 2 audits from the engineering side","company":"Cruitek","rawCompany":"cruitek","city":"Denver","state":"CO","isRemote":true,"isActive":false,"createdAt":"2026-10-14T13:05:40.280Z","occupations":[{"code":"15-1252.00","title":"Software Developers","slug":"software-developers"},{"code":"15-1299.08","title":"Computer Systems Engineers/Architects","slug":"computer-systems-engineers-architects"},{"code":"15-1299.05","title":"Information Security Engineers","slug":"information-security-engineers"}],"industries":[{"code":"541512","title":"Computer Systems Design Services","slug":"computer-systems-design-services"},{"code":"541511","title":"Custom Computer Programming Services","slug":"custom-computer-programming-services"},{"code":"541519","title":"Other Computer Related Services","slug":"other-computer-related-services"}],"jobPosting":{"@context":"https://schema.org","@type":"JobPosting","title":"DevSecOps Engineer -Remote","description":"DevSecOps Engineer -RemoteNo 3rd PARTIES or Sponsorships at this point100% RemoteGreat CompanyUnlimited Growth*4 Months*MUST be very professional and have great communication skills-Client facing position*This is a VERY Sr Level and Specific Skill Set- Read Closely*You MUST have done all this!! NOT I can do it, but I am currently doing it or did it at my last position.Client is seeking a DevSecOps Engineer to establish and operationalize a vulnerability management program within GitLab. The selected resource will build processes, standards, and automation around vulnerability scanning, SBOM generation, dependency scanning, and container security, then transition ownership to the internal DevOps team at the conclusion of the engagement.This role will focus on standardizing security scanning across projects, reducing false positives, building remediation workflows, automating dependency management, supporting SBOM generation, and documenting processes for long-term operational support. Fixing application vulnerabilities is out of scope; application teams will own remediation efforts.Skills Must HaveHands-on GitLab CI/CD pipeline authoringGitLab security features (SAST, dependency scanning, container scanning, security policies, vulnerability reporting)Experience building a vulnerability management programVulnerability triage processesRemediation workflow developmentSeverity-based remediation timelinesSecurity exception managementSBOM generationDependency scanningContainer image scanningExperience documenting operational processes and proceduresSkills Nice to HaveExperience with dependency management tooling such as RenovateExperience with AWS ECSExperience with Elixir/HexExperience with Node.jsExperience with RubyExperience with Lucee/CFML on the JVMCycloneDX SBOM experienceSPDX SBOM experienceExperience supporting SOC 2 audits from the engineering side","datePosted":"2026-10-14T13:05:40.280Z","dateModified":"2026-10-14T13:05:40.280Z","hiringOrganization":{"@type":"Organization","name":"Cruitek","sameAs":"https://jobsearcher.com"},"jobLocationType":"TELECOMMUTE","applicantLocationRequirements":{"@type":"Country","name":"US"},"jobLocation":{"@type":"Place","address":{"@type":"PostalAddress","addressLocality":"Denver","addressRegion":"CO","addressCountry":"US"}},"identifier":{"@type":"PropertyValue","name":"JobSearcher","value":"8b67beb0f11ce4e820ec3052"},"url":"https://jobsearcher.com/jobs/8b67beb0f11ce4e820ec3052"}}