ZipRecruiter

Log In

1

Head Of Devsecops Jobs (NOW HIRING)

Tines

Senior Product Security Engineer

OR · On-site +1

Reporting to our Head of IT Operations & Information Security, you'll lead efforts to mature our ... Experience with CI/CD security integration and DevSecOps practices. * Strong incident response ...

SGS U.S. Holding Inc.

DevOps Engineer

Fallston, NC · On-site

$49 - $67/hr

The DevOps Engineer reports to the Head of Software Development and works closely with Program ... Integrate security best practices into development and deployment processes (DevSecOps approach)

next page

Showing results 1-20

All JobsHead Of Devsecops Jobs

Head Of Devsecops information

See salary details

$22K

$96.6K

$221K

How much do head of devsecops jobs pay per year?

As of Jun 24, 2026, the average yearly pay for head of devsecops in the United States is $96,611.00, according to ZipRecruiter salary data. Most workers in this role earn between $50,000.00 and $125,500.00 per year, depending on experience, location, and employer.

What are some common challenges faced by a Head of DevSecOps when integrating security practices into fast-paced development environments?

A Head of DevSecOps often encounters the challenge of balancing security with the need for rapid software delivery. Integrating security measures without slowing down development requires close collaboration with both development and operations teams, as well as fostering a culture where security is seen as everyone's responsibility. Overcoming resistance to change and ensuring that automated security tools are seamlessly embedded into CI/CD pipelines are also key hurdles. Success in this role relies on strong communication skills, up-to-date technical knowledge, and the ability to drive organizational buy-in for secure development practices.

What does a Head of DevSecOps do?

A Head of DevSecOps is responsible for overseeing the integration of security practices into the DevOps process within an organization. This role involves leading teams to ensure that security is considered at every stage of the software development lifecycle, from design and coding to deployment and maintenance. They develop and enforce security policies, collaborate with development and operations teams, and implement tools to automate security checks. Their goal is to reduce security risks while maintaining development speed and efficiency.

What is the salary of DevSecOps lead?

The salary of a DevSecOps lead typically ranges from $100,000 to $160,000 annually, depending on experience, location, and company size. Professionals with certifications like CISSP or AWS Security often command higher compensation, and roles may include responsibilities such as security automation and cloud integration.

Is DevOps still in demand in 2026?

DevSecOps, a specialized area within DevOps focusing on security integration, remains highly in demand in 2026 due to increasing cybersecurity concerns and the need for automated security practices. Organizations continue to seek professionals skilled in CI/CD tools, cloud platforms, and security automation to support rapid, secure software delivery.

Is DevSecOps a good career path?

DevSecOps is a growing field that combines development, security, and operations to improve software security and deployment efficiency. It requires skills in cybersecurity, automation tools, and cloud platforms, making it a valuable and in-demand career choice for those interested in security and software development. The role offers opportunities for advancement and specialization in a rapidly evolving industry.

Is DevSecOps still a thing?

DevSecOps remains a vital approach in cybersecurity and software development, integrating security practices into the development and operations process. The role of Head of DevSecOps involves overseeing security automation, continuous integration, and compliance, reflecting ongoing industry demand for secure development pipelines.

What are the key skills and qualifications needed to thrive as a Head of DevSecOps, and why are they important?

To thrive as a Head of DevSecOps, you need deep expertise in cybersecurity, cloud infrastructure, software development, and a strong understanding of DevOps methodologies, often supported by a degree in computer science or a related field. Familiarity with tools such as CI/CD pipelines (e.g., Jenkins), security scanning platforms, containerization (Docker, Kubernetes), and certifications like CISSP or AWS Certified Security are highly valued. Exceptional leadership, communication, and problem-solving skills set top candidates apart, enabling them to guide cross-functional teams and foster a culture of security. These skills are crucial for integrating security seamlessly into development processes, reducing risks, and ensuring organizational resilience in an evolving threat landscape.
More about Head Of Devsecops jobs
What cities are hiring for Head Of Devsecops jobs? Cities with the most Head Of Devsecops job openings:
What are the most commonly searched types of Of Devsecops jobs? The most popular types of Of Devsecops jobs are:
What states have the most Head Of Devsecops jobs? States with the most job openings for Head Of Devsecops jobs include:
What job categories do people searching Head Of Devsecops jobs look for? The top searched job categories for Head Of Devsecops jobs are:
Head Of Devsecops jobs near you
Infographic showing various Head Of Devsecops job openings in the United States as of June 2026, with employment types broken down into 93% Full Time, 2% Part Time, and 5% Contract. Highlights an 72% In-person, 7% Hybrid, and 21% Remote job distribution, with an average salary of $96,611 per year, or $46.4 per hour.

Senior Product Security Engineer

Tines

OR • On-site, Remote

Other

Posted 21 days ago

Job description

The Role

We're seeking a Senior Product Security Engineer who is passionate about building and scaling robust security programs in an AI-forward engineering environment. Reporting to our Head of IT Operations & Information Security, you'll lead efforts to mature our product security initiatives at a pivotal moment of product expansion, ensuring security keeps pace as our developers increasingly leverage AI in their workflows.

A core part of this role is using AI and automation as force multipliers, building security tooling, guardrails, and review processes that scale to match the velocity of AI-assisted development across our engineering org.

This position can be based remotely in the United States.

Key Responsibilities
  • Product Security Leadership: Partner with product and engineering teams to integrate security throughout the development lifecycle and drive security initiatives across our stack.
  • AI-Augmented Security: Leverage AI and automation to scale product security coverage, matching the pace of AI-assisted development across engineering.
  • Security Architecture: Design and implement security controls and architecture that scale with our growing product portfolio.
  • Threat Modeling & Risk Assessment: Conduct comprehensive security reviews and threat modeling to identify and mitigate potential vulnerabilities, including risks introduced by AI-generated code and AI-powered features.
  • Vulnerability Management: Contribute to our vulnerability management program, including triaging bug bounty and vulnerability disclosure reports and driving remediation efforts.
  • Security Automation: Develop and implement automated security testing, monitoring, and response capabilities, using Tines itself, plus AI-driven tooling, to eliminate manual toil.
  • Security Incident Response: Serve as an incident responder during security events and lead post-incident reviews.
  • Security Education: Champion security awareness and provide technical guidance to engineering teams, including best practices for secure AI-assisted development.
Qualifications
  • 8+ years of experience in application or product security roles, with demonstrated expertise in securing cloud-native applications.
  • Strong understanding of modern application security principles, OWASP Top 10, and secure SDLC practices.
  • Experience leveraging AI and automation to scale security programs (e.g., LLM-assisted code review, automated triage, agentic security workflows).
  • Experience with cloud security (AWS preferred) and securing containerized environments (Docker, Kubernetes).
  • Proficiency in modern programming languages; experience with Ruby, TypeScript, and/or Rust is highly desirable.
  • Knowledge of security testing methodologies and tools (SAST, DAST, SCA).
  • Experience with CI/CD security integration and DevSecOps practices.
  • Strong incident response skills and experience participating in on-call rotations.
  • Excellent communication skills with ability to translate complex security concepts to diverse audiences.
  • Self-motivated with exceptional analytical thinking and problem-solving abilities.
Nice to Haves
  • Experience securing AI/ML systems and LLM-powered features (prompt injection, model abuse, data leakage, agentic system risks).
  • Familiarity with LLM red-teaming, AI threat modeling frameworks (e.g., MITRE ATLAS, OWASP LLM Top 10), and emerging AI security standards.
  • Hands-on experience building agentic or automated security workflows (using Tines or similar platforms).
  • Contributions to open-source security tooling or active participation in the security research community (CVEs, conference talks, published research).
  • Experience designing secure-by-default developer platforms, paved roads, or golden paths for engineering teams.
  • Background in bug bounty triage at scale, or running a public VDP/bug bounty program.
  • Familiarity with multi-tenant SaaS security challenges (tenant isolation, authz models, data segregation).
  • Experience supporting FedRAMP (Moderate/High) and/or DoD Impact Level (IL4/IL5/IL6) environments.
  • Prior experience at a high-growth startup launching new products or expanding into new product lines.

Target Annual Compensation: $218-$235k + equity

Applicants for this opportunity must be authorized to work for any employer in the U.S. We are unable to sponsor or take over sponsorship of an employment Visa at this time.

Apply