Manager Information Security

DXC Technology•Washington, DC

1d•$132,400 - $245,800

About The Position

The Manager Information Security designs, builds, and maintains AI-enabled security solutions and automation across vulnerability management, cloud security, DevSecOps, risk management, and reporting. The role uses AI-assisted development and modern engineering practices to prototype security tools and harden them for production, while integrating scanners, cloud control planes, CI/CD pipelines, ticketing systems, and SIEM and SOAR platforms. The position develops cloud security posture management capabilities, embeds security controls into DevSecOps pipelines, and engineers AI solutions for risk processes such as evidence collection and control testing. It also builds dashboards and metrics, establishes human-in-the-loop controls and audit logging for automated actions, and evaluates AI tools for accuracy, cost, security, and limitations. The role partners with security operations, governance, and IT teams to identify and iteratively automate manual processes, with clear documentation and operational handoffs.

Requirements

Bachelor’s degree in computer science, Information Systems, Engineering, or a similar discipline, or equivalent experience.
At least 3 years of experience in security engineering, security automation, DevSecOps, or software engineering with a security focus.
Demonstrated experience building automation or tooling that is in production use, ideally in a security context.
Hands-on experience with at least one of the following: vulnerability management platforms, cloud security posture management tools, SAST/DAST/SCA tooling, or SIEM/SOAR platforms.
Experience with Microsoft Defender for Cloud, Microsoft Sentinel, Microsoft Defender for Endpoint, or equivalent platforms.
Familiarity with Azure DevOps and Git-based version control workflows.
Strong programming skills in Python and PowerShell, working knowledge of JavaScript or TypeScript, and familiarity with infrastructure-as-code tools such as Terraform or Bicep.
Experience building API integrations and event-driven automation, including REST APIs, webhooks, and message queues.
Working knowledge of cloud security posture management and cloud platforms, particularly Azure and Microsoft 365, with exposure to AWS or GCP.
Familiarity with DevSecOps tooling and CI/CD platforms such as Azure DevOps, GitHub Actions, or GitLab.
Understanding of vulnerability management, threat intelligence, and risk frameworks such as NIST CSF, NIST AI RMF, and CIS Benchmarks.
Ability to design dashboards and metrics using tools such as Power BI, Kusto (KQL), or similar platforms.
Strong problem-solving skills, a bias toward action, and comfort turning ambiguous security problems into working solutions.
Clear communication skills and ability to explain technical designs to engineers and non-technical stakeholders.

Nice To Haves

Experience with AI or LLM application development, including retrieval-augmented generation, agent frameworks, or evaluation of model outputs.
Practical experience using AI-assisted coding tools and LLM APIs, including prompt design, evaluation, and understanding model-output limitations.

Responsibilities

Design, build, and maintain AI-enabled security solutions that automate vulnerability triage, enrichment, prioritization, and ticket routing.
Use AI-assisted development and modern engineering practices to prototype security tools and harden them for production.
Build automation workflows and integrations across scanners, cloud control planes, CI/CD pipelines, ticketing systems such as Azure DevOps, and SIEM and SOAR platforms.
Develop cloud security posture management capabilities, including automated misconfiguration detection, policy-as-code, drift remediation, and multi-cloud guardrails.
Embed security into DevSecOps pipelines using automated SAST, DAST, SCA, secrets detection, container and infrastructure-as-code scanning, and AI-assisted code review and fix suggestions.
Engineer AI solutions for risk management, including evidence collection, control testing, risk register enrichment, and automated assessment support.
Build security dashboards and metrics pipelines that provide timely views of security posture, backlog, remediation performance, and risk trends.
Design human-in-the-loop controls, approval gates, and audit logging for automated and AI-driven actions.
Evaluate and validate AI models, agents, and tools for accuracy, false-positive rates, cost, and security, and document their limitations.
Apply secure coding and engineering practices to security tooling, including secrets management, least-privilege access, dependency hygiene, and testing.
Produce technical documentation, runbooks, and knowledge articles to support reliable operation and handoff.
Partner with security operations, governance, and IT teams to identify manual processes suitable for automation and deliver solutions iteratively.