Senior Manager - Platform SDLC Engineers

Role purpose • Lead secure SDLC implementation across platforms by embedding security controls, automation and evidence into application delivery pipelines. Key responsibilities • Define and lead the secure SDLC operating model, standards and reusable pipeline patterns. • Embed code, dependency, secret, container, API and infrastructure-as-code checks into CI/CD. • Set remediation gates, exception workflows and release-compliance controls. • Coordinate platform engineers, application owners, cyber teams and governance stakeholders. • Measure secure SDLC adoption, vulnerability reduction and release compliance. • Maintain operational runbooks, control evidence and continuous-improvement plans. Required skills • DevSecOps and secure SDLC leadership • CI/CD security and policy-as-code • Cloud-native platforms and Kubernetes • SAST, DAST, SCA, secrets and IaC security • Security control evidence and governance reporting • Stakeholder and delivery leadership Key deliverables • Secure SDLC standards and reusable pipeline controls • Adoption and compliance dashboards • Risk-based release gates and tracked remediation outcomes Certifications • CISSP, CCSP, cloud security or DevSecOps certification desirable Preferred tools / platforms • GitHub/Azure DevOps/Jenkins • SonarQube and Snyk or equivalents • Kubernetes • Terraform • OPA/policy-as-code • Power BI