Information Security Advisor

The Information Security Advisor supports security assessment activities and DevSecOps initiatives by helping organizations build, automate, and improve security controls throughout the software development lifecycle. This role combines hands-on technical implementation with risk advisory responsibilities, partnering closely with technology teams to integrate security into development, deployment, and operational processes., Security Assessments & Risk Management

• Evaluate the effectiveness of security controls through automated data collection, continuous monitoring, and evidence-based assessments.
• Analyze large datasets to identify trends, anomalies, and potential control gaps.
• Support consistent evaluation, documentation, and reporting of security risks across multiple environments.
• Assess technical and operational controls against established security requirements and industry best practices.

DevSecOps & Security Automation

• Implement and maintain application security testing capabilities, including static analysis (SAST), dynamic analysis (DAST), infrastructure-as-code (IaC) scanning, and vulnerability management tools within CI/CD pipelines.
• Develop and integrate APIs and automation workflows to streamline security testing, reporting, and evidence collection.
• Support certificate management and code-signing processes for secure software development and deployment.
• Partner with development and engineering teams to prioritize, remediate, and validate security findings.

Security Advisory & Stakeholder Engagement

• Communicate technical risks and security findings to both technical and non-technical stakeholders.
• Provide guidance on security best practices, risk mitigation strategies, and secure development principles.
• Facilitate discussions that enable informed decision-making related to security, compliance, and technology risk.
• Identify recurring issues and recommend improvements to strengthen the overall security posture.

Process Improvement & Innovation

• Design and enhance security assessment processes through automation, analytics, and emerging technologies.
• Drive efficiency by reducing manual effort and improving visibility into security and compliance activities.
• Contribute to continuous improvement efforts through root cause analysis and process optimization.

Collaboration & Knowledge Sharing

• Serve as a security advisor to engineers, architects, product teams, and other stakeholders.
• Build strong cross-functional partnerships to promote adoption of security best practices.
• Mentor team members and contribute reusable solutions, documentation, and standards.
• Support knowledge sharing and continuous learning across security and engineering communities.

The ideal candidate brings experience in security assessments, security automation, application security, and risk management, along with the ability to translate technical findings into meaningful business outcomes., * Strong understanding of information security principles, risk management practices, and security assessment methodologies.

• Experience working within cloud environments, including AWS and/or Azure.
• Strong analytical and problem-solving skills with the ability to interpret complex technical and business information.
• Effective written and verbal communication skills.
• Ability to influence stakeholders and drive outcomes in a collaborative environment.
• Demonstrated ability to balance technical detail with strategic thinking., * Bachelor’s degree in Information Security, Computer Science, Information Technology, or a related discipline.
• 5+ years of experience in information security, cybersecurity, risk management, audit, compliance, or related fields.
• Experience with security automation, monitoring, compliance, or analytics platforms.
• Relevant industry certifications preferred (e.g., CISSP, CISA, CRISC, Security+, or similar).

Preferred Qualifications

• Experience implementing DevSecOps practices and integrating security into software development lifecycles.
• Background supporting large-scale security testing, vulnerability management, and compliance initiatives.
• Experience administering source code repositories, build systems, and CI/CD platforms.
• Hands-on experience integrating application security and infrastructure security tools into development pipelines.
• Demonstrated ability to collaborate effectively with software engineering, platform, and infrastructure teams.

Technical Skills Cloud Platforms

• AWS and/or Microsoft Azure
• Cloud security principles and best practices

Development & DevOps Tools

• Source code management and version control systems
• CI/CD platforms and build automation tools
• API development and integration

Security Technologies

• Static Application Security Testing (SAST)
• Dynamic Application Security Testing (DAST)
• Infrastructure-as-Code (IaC) security scanning
• Vulnerability management and compliance tools
• Certificate management and code-signing technologies

Data & Automation

• Security automation frameworks
• Data analysis and reporting tools
• Continuous monitoring and security analytics platforms

Everforth Apex is a world-class IT services company that serves thousands of clients across the globe. When you join Everforth Apex, you become part of a team that values innovation, collaboration, and continuous learning. We offer quality career resources, training, certifications, development opportunities, and a comprehensive benefits package. Our commitment to excellence is reflected in many awards, including ClearlyRateds Best of Staffing in Talent Satisfaction in the United States and Great Place to Work in the United Kingdom and Mexico.

Everforth Apex uses a virtual recruiter as part of the application process. Click for more details. By applying for this job, you agree to receive calls, AI-generated calls, text messages, or emails from Everforth Apex and its affiliates, and contracted partners. Frequency varies for text messages. Message and data rates may apply. Carriers are not liable for delayed or undelivered messages. You can reply STOP to cancel and HELP for help. You can access our privacy policy at