Department Manager - DevSecOps Security
You will manage the day-to-day operations and continuous improvement of CP Axtra's security testing platforms: Checkmarx for SAST and SCA, SonarQube for code quality and security, Qualys WAS and OWASP ZAP for DAST, Spectral for secrets detection, and IaC scanning tools for Terraform and container configurations. Your mission is to make these tools genuinely useful — high signal, low noise, seamlessly integrated into every CI/CD pipeline.
You'll work closely with the Application Security Lead on strategy while owning execution. This means tuning scan policies, onboarding new repositories, troubleshooting pipeline integrations, training developers on interpreting results, and continuously reducing false positive rates. You'll also extend coverage into container security and infrastructure-as-code scanning as CP Axtra's cloud-native footprint grows.
Success in this role means developers trust the tools — they fix what the scanner flags because they know the findings are real and the remediation guidance is actionable.
You will manage the day-to-day operations and continuous improvement of CP Axtra's security testing platforms: Checkmarx for SAST and SCA, SonarQube for code quality and security, Qualys WAS and OWASP ZAP for DAST, Spectral for secrets detection, and IaC scanning tools for Terraform and container configurations. Your mission is to make these tools genuinely useful — high signal, low noise, seamlessly integrated into every CI/CD pipeline.
