Senior Manager - Platform SDLC Engineers

Role purpose

• Lead secure SDLC implementation across platforms by embedding security controls, automation and evidence into application delivery pipelines.

Key responsibilities

• Define and lead the secure SDLC operating model, standards and reusable pipeline patterns.
• Embed code, dependency, secret, container, API and infrastructure-as-code checks into CI/CD.
• Set remediation gates, exception workflows and release-compliance controls.
• Coordinate platform engineers, application owners, cyber teams and governance stakeholders.
• Measure secure SDLC adoption, vulnerability reduction and release compliance.
• Maintain operational runbooks, control evidence and continuous-improvement plans.

Desired Candidate Profile

Required skills

• DevSecOps and secure SDLC leadership
• CI/CD security and policy-as-code
• Cloud-native platforms and Kubernetes
• SAST, DAST, SCA, secrets and IaC security
• Security control evidence and governance reporting
• Stakeholder and delivery leadership

Key deliverables

• Secure SDLC standards and reusable pipeline controls
• Adoption and compliance dashboards
• Risk-based release gates and tracked remediation outcomes

Certifications

• CISSP, CCSP, cloud security or DevSecOps certification desirable

Preferred tools / platforms

• GitHub/Azure DevOps/Jenkins
• SonarQube and Snyk or equivalents
• Kubernetes
• Terraform
• OPA/policy-as-code
• Power BI