About InvoiceCloud:

InvoiceCloud is a fast-growing fintech leader recognized with 20 major awards in 2025, including USA TODAY and Boston Globe Top Workplaces, multiple SaaS Awards wins for Best Solution for Finance and FinTech, and national customer service honors from Stevie and the Business Intelligence Group. Judges also highlighted our mission to reduce digital exclusion and restore simplicity and dignity to how people pay for essential services, as well as our leadership in AI maturity and responsible innovation. It’s an award-winning, purpose-driven environment where top talent thrives. To learn more, visit InvoiceCloud.com.

InvoiceCloudis a fast-growing fintech leader recognized with 20 major awards in 2025, including USA TODAY and Boston Globe Top Workplaces, multiple SaaS Awards wins for Best Solution for Finance and FinTech, and national customer service honors from Stevie and the Business Intelligence Group. Judges also highlighted our mission to reduce digital exclusion and restore simplicity and dignity to how people pay for essential services, as well as our leadership in AI maturity and responsible innovation.It’san award-winning, purpose-driven environment where top talent thrives.

Job Details:

We areseekinga highly skilled and results-oriented

DevSecOpsLead
to strengthen application security acrossInvoiceCloud’sSaaS platform. This is a senior individual contributor role responsible for owning the design, implementation, and ongoing maturity ofInvoiceCloud’sDevSecOpsprogram across engineering teams and business units.

In this role, you will embed security early and consistently into the software development lifecycle by integrating automated security controls directly into CI/CD pipelines. You will define and enforce secure coding standards, remediation SLAs, and guardrails that balance strong risk reduction with efficient delivery. Acting as a trusted technical authority, you will partner closely with Engineering, Cloud Infrastructure, Security, and Architecture teams to align tooling, workflows, and standards across a complex, distributed environment.

TheDevSecOpsLeadoperateswith a high degree of autonomy and accountability, owning outcomes rather than tasks. You will measure and report on SDLC security posture, maturity, and progress, translating technical findings into clear insights for security leadership and executive stakeholders. While this role does not have people management responsibility, it carriessignificant influenceand enterprise impact throughstandardsownership, cross-functional coordination, and technical leadership.

Success Profile:

This role is anchored in our company’s core competencies—These competencies reflect the mindsets and behaviors that define success in this role. We outline how each competency translates into real-world actions and outcomes specific to this role.

Ownership

Owns the design, implementation, and ongoing operation ofInvoiceCloud’sDevSecOpsprogram, embedding security controls directly into CI/CD pipelines.

Defines secure coding standards,remediationSLAs, and enforcement gates, ensuring consistent adoption across engineering teams.

Serves as the accountable owner for SDLC security posture, coordinating with engineering, cloud, and security stakeholders to resolve risk.

Communicates security posture, risks, and progress clearly to the CISO and executive leadership.

Drives Efficiency

Integrates automated SAST, DAST, SCA,IaC, container, and secrets scanning into development workflows to reduce manual effort and friction.

Designs andmaintainsscalable “golden path” pipelines with standardized guardrails, enabling teams to ship securely by default.

Establishes policy-as-code, admission controls, and branch protections to ensure repeatable, low-touch enforcement.

UsesAI-driven and automated analysis to accelerate detection, triage, and remediation of security findings across the SDLC.

Results Driven

Defines and tracks measurable SDLC security metrics, reporting maturity, coverage, and outcomes over time.

Delivers phased outcomes, from quick-win controls to long-term application security maturity plans.

Partners with teams to ensure security improvements translate into real risk reduction, not just tooling adoption.

Innovative

EvolvesDevSecOpspractices by evaluating and adopting modern application and supply-chain security techniques.

Improves existing tooling and workflows based on data, feedback, and emerging threats.

Translates technical insights into practical improvements that scale across business units

Requirements

Bachelor’s degree in Computer Science, Software Engineering, or related field preferred

7+ years of experience in DevOps or Application Security with hands-on CI/CDexpertise

Strong experience with Azure DevOps, AppSec tooling,IaC, and container security

Ability tooperateautonomously, influence without authority, and deliver results in ambiguity

InvoiceCloud is committed to providing equal employment opportunities to all employees and applicants. We do not tolerate discrimination or harassment of any kind based on race, color, religion, age, sex, nationality, disability, genetic information, veteran or military status, sexual orientation, gender identity or expression, or any other characteristic protected under applicable laws.

This commitment applies to all aspects of employment, including recruitment, hiring, placement, promotion, termination, layoff, recall, transfer, leave, compensation, and training.

If you require a disability-related or religious accommodation during the application or recruitment process, and wish to discuss possible adjustments, please contact jobs@invoicecloud.com.

Click here to review InvoiceCloud’s Job Applicant Privacy Policy.

For recruitment agencies: InvoiceCloud does not accept unsolicited resumes from agencies. Please do not forward resumes to our job aliases, employees, or any other company location. InvoiceCloud is not responsible for any fees associated with unsolicited submissions.

DevSecOps Lead

Meet JobCopilot: Your Personal AI Job Hunter