> Markdown version of [/jobs/ext/2113190-information-security-advisor](https://www.wearedevelopers.com/jobs/ext/2113190-information-security-advisor). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Information Security Advisor - **Company:** Everforth Apex - **Location:** Richmond, VA, United States - **Experience:** Expert - **Contract:** Permanent contract - **Skills:** Application Programming Interfaces (APIs), Amazon Web Services, Business Analytics Applications, Build Automation, Microsoft Azure, Big Data, Cloud Computing, Cloud Computing Security, Static Program Analysis, CompTIA Security+, Cyber Security, Continuous Integration, DevOps, Dynamic Program Analysis, Secure Coding, Software Engineering, Systems Integration, Software Vulnerability Management, SSL Certificate Management, Cloud Platform System, Delivery Pipeline, Software Security, Infrastructure Automation Frameworks, Information Technology, Build Tools, Api Design, Software Version Control, Devsecops, Security Orchestration, Automation & Response, Static Application Security Testing, Vulnerability Analysis, Dynamic Application Security Testing - **Published:** August 19, 2026 - **Apply:** https://www.dice.com/job-detail/3fac7d2b-5cd4-4d50-b7c1-f2889308875f ## About the Role The ideal candidate brings experience in security assessments, security automation, application security, and risk management, along with the ability to translate technical findings into meaningful business outcomes., * Strong understanding of information security principles, risk management practices, and security assessment methodologies. * Experience working within cloud environments, including AWS and/or Azure. * Strong analytical and problem-solving skills with the ability to interpret complex technical and business information. * Effective written and verbal communication skills. * Ability to influence stakeholders and drive outcomes in a collaborative environment. * Demonstrated ability to balance technical detail with strategic thinking., * Bachelor's degree in Information Security, Computer Science, Information Technology, or a related discipline. * 5+ years of experience in information security, cybersecurity, risk management, audit, compliance, or related fields. * Experience with security automation, monitoring, compliance, or analytics platforms. * Relevant industry certifications preferred (e.g., CISSP, CISA, CRISC, Security+, or similar). Preferred Qualifications * Experience implementing DevSecOps practices and integrating security into software development lifecycles. * Background supporting large-scale security testing, vulnerability management, and compliance initiatives. * Experience administering source code repositories, build systems, and CI/CD platforms. * Hands-on experience integrating application security and infrastructure security tools into development pipelines. * Demonstrated ability to collaborate effectively with software engineering, platform, and infrastructure teams. Technical Skills Cloud Platforms * AWS and/or Microsoft Azure * Cloud security principles and best practices Development & DevOps Tools * Source code management and version control systems * CI/CD platforms and build automation tools * API development and integration Security Technologies * Static Application Security Testing (SAST) * Dynamic Application Security Testing (DAST) * Infrastructure-as-Code (IaC) security scanning * Vulnerability management and compliance tools * Certificate management and code-signing technologies Data & Automation * Security automation frameworks * Data analysis and reporting tools * Continuous monitoring and security analytics platforms ## Description The Information Security Advisor supports security assessment activities and DevSecOps initiatives by helping organizations build, automate, and improve security controls throughout the software development lifecycle. This role combines hands-on technical implementation with risk advisory responsibilities, partnering closely with technology teams to integrate security into development, deployment, and operational processes., Security Assessments & Risk Management * Evaluate the effectiveness of security controls through automated data collection, continuous monitoring, and evidence-based assessments. * Analyze large datasets to identify trends, anomalies, and potential control gaps. * Support consistent evaluation, documentation, and reporting of security risks across multiple environments. * Assess technical and operational controls against established security requirements and industry best practices. DevSecOps & Security Automation * Implement and maintain application security testing capabilities, including static analysis (SAST), dynamic analysis (DAST), infrastructure-as-code (IaC) scanning, and vulnerability management tools within CI/CD pipelines. * Develop and integrate APIs and automation workflows to streamline security testing, reporting, and evidence collection. * Support certificate management and code-signing processes for secure software development and deployment. * Partner with development and engineering teams to prioritize, remediate, and validate security findings. Security Advisory & Stakeholder Engagement * Communicate technical risks and security findings to both technical and non-technical stakeholders. * Provide guidance on security best practices, risk mitigation strategies, and secure development principles. * Facilitate discussions that enable informed decision-making related to security, compliance, and technology risk. * Identify recurring issues and recommend improvements to strengthen the overall security posture. Process Improvement & Innovation * Design and enhance security assessment processes through automation, analytics, and emerging technologies. * Drive efficiency by reducing manual effort and improving visibility into security and compliance activities. * Contribute to continuous improvement efforts through root cause analysis and process optimization. Collaboration & Knowledge Sharing * Serve as a security advisor to engineers, architects, product teams, and other stakeholders. * Build strong cross-functional partnerships to promote adoption of security best practices. * Mentor team members and contribute reusable solutions, documentation, and standards. * Support knowledge sharing and continuous learning across security and engineering communities. ## Related Videos - [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers) - [DevSecOps: Injecting Security into Mobile CI/CD Pipelines](https://www.wearedevelopers.com/videos/273-devsecops-injecting-security-into-mobile-ci-cd-pipelines) - [From DevOps to Scaled DevOps: How We’re Rebuilding Continuous Delivery as a Platform](https://www.wearedevelopers.com/videos/100018-from-devops-to-scaled-devops-how-we-re-rebuilding-continuous-delivery-as-a-platform) - [Alibaba Big Data and Machine Learning Technology](https://www.wearedevelopers.com/videos/37-alibaba-big-data-and-machine-learning-technology) - [DevSecOps culture](https://www.wearedevelopers.com/videos/783-devsecops-culture) - [DevSecOps: Security in DevOps](https://www.wearedevelopers.com/videos/36-devsecops-security-in-devops) ## Related Articles - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers) - [Understanding and Mitigating Common Web Vulnerabilities](https://www.wearedevelopers.com/magazine/565-understanding-and-mitigating-common-web-vulnerabilities) - [The 12 Best Jobs for Software Engineers](https://www.wearedevelopers.com/magazine/401-the-12-best-jobs-for-software-engineers) - [Is Software Engineering Over-Saturated?](https://www.wearedevelopers.com/magazine/418-is-software-engineering-over-saturated) - [Why Upskilling And Reskilling is Important For Developers](https://www.wearedevelopers.com/magazine/428-why-upskilling-and-reskilling-is-important-for-developers)