AVP Cybersecurity (DevSecOps)

Location: Remote nationwide within the United States; candidates must reside in and be authorized to work in the United States. Travel to and work onsite at client, temporary, or corporate office locations may be required based on business needs.

Salary: $171,750–$257,700 annually, based on experience.

Company

hirify.global provides technology-enabled revenue cycle management and point solutions for hospitals, health systems, and affiliated physician groups across the United States.

What you will do

• Build, lead, and mature the application security and DevSecOps program across the secure software development lifecycle.
• Perform secure code reviews, threat modeling, security architecture reviews, and hands-on remediation guidance.
• Design and tune SAST, DAST, SCA, container scanning, and secrets detection tooling, integrating security gates into CI/CD pipelines.
• Own application vulnerability management, including triage, prioritization, remediation SLAs, escalation, and critical vulnerability response.
• Partner with engineering, product, and architecture teams to embed security requirements and shift-left practices into new products and features.
• Mentor application security engineers and security champions, develop secure coding standards, and report application risk posture to executives.

Requirements

• 8+ years of experience in application security, secure software development, or DevSecOps, including hands-on engineering or security engineering work.
• 3+ years in a leadership or technical lead role while remaining hands-on and mentoring technical teams.
• Hands-on experience with SAST, DAST, SCA, CI/CD security integration, cloud security, and container or orchestration security.
• Working proficiency in at least one programming language such as Java, Python, JavaScript/TypeScript, Go, or C#.
• Experience with threat modeling, security architecture reviews, vulnerability management programs, remediation SLAs, and executive reporting.
• Must reside in and be authorized to work in the United States.

Nice to have

• CSSLP, OSCP, GWAPT, CISSP, or a comparable security certification.
• Familiarity with OWASP ASVS, OWASP Top 10, and NIST SSDF.
• Experience with Checkmarx, Veracode, Snyk, Semgrep, Fortify, Jenkins, GitHub Actions, GitLab CI, Azure DevOps, AWS, Azure, GCP, Docker, or Kubernetes.
• Openness to using AI to improve processes and reduce friction for patients and clients.

Culture & Benefits

• Remote work with business-related travel and onsite work as required.
• Healthcare, paid time off, retirement, and well-being benefits.
• Professional certification opportunities and tuition reimbursement.
• Quarterly and annual incentive programs.
• Culture focused on collaboration, innovation, growth, work-life flexibility, and purpose.