Haken DevSecOps Lead - CI - CD, Black Duck & Coverity | Tokyo

Join a leading global technology consulting and IT services organisation as a DevSecOps Lead, driving enterprise-level CI/CD security integration and software supply chain security initiatives for major international clients.

Based in Tokyo, this contract opportunity offers an exceptionally flexible 99% remote working arrangement, allowing you to lead technically complex DevSecOps transformation projects while collaborating with domestic stakeholders and offshore engineering teams.

You will take ownership of the architecture, integration and optimisation of CI/CD security pipelines, with a particular focus on Black Duck Software Composition Analysis (SCA) and Coverity Static Application Security Testing (SAST) within GitHub Enterprise environments.

A central responsibility will be defining the Phase 1 Scope of Work (SOW), designing end-to-end delivery workflows and preparing detailed technical integration specifications that guide project execution.

You will also improve complex automation scripts and security scanning workflows, ensuring that vulnerability detection and compliance checks operate effectively without unnecessarily slowing software development and release cycles.

As the Technical Bridge Project Manager, you will connect Japanese client stakeholders with offshore engineering delivery teams, translating business and technical requirements into clear implementation plans and coordinating delivery across different locations and cultures.

The role combines hands-on DevSecOps engineering, application security, CI/CD automation and technical project leadership, offering an opportunity to influence security practices across enterprise software development environments.

You will oversee offshore technical specialists responsible for automated vulnerability triage, remediation workflows and security reporting, helping maintain delivery quality and alignment with client requirements.

This opportunity is particularly attractive to experienced DevSecOps Leads, CI/CD Architects, Application Security Engineers, Security Automation Specialists and Technical Project Managers seeking to work on large-scale international security engineering programmes.

Please note: This position is open only to candidates currently residing in Japan.

Key Responsibilities

• Architect and document the Phase 1 Scope of Work (SOW), defining technical deliverables, implementation priorities and project requirements.
• Design end-to-end DevSecOps delivery workflows and detailed specifications for enterprise CI/CD security integrations.
• Integrate Black Duck (SCA) and Coverity (SAST) into GitHub Enterprise CI/CD pipelines to strengthen application and software supply chain security.
• Optimise automated security scanning workflows to support vulnerability identification, software quality and regulatory compliance objectives.
• Refactor complex CI/CD automation scripts using GitHub Actions, Python, Bash and YAML to improve reliability, efficiency and maintainability.
• Ensure security scanning processes operate effectively without creating unnecessary bottlenecks in developer workflows and software release pipelines.
• Act as the Technical Bridge Project Manager, coordinating communication between Japanese client stakeholders and offshore engineering delivery teams.
• Lead and oversee offshore engineers responsible for automated vulnerability triage, remediation pipelines and security reporting.
• Translate client requirements into actionable technical specifications and support effective delivery planning across distributed teams.
• Monitor integration progress, identify technical risks and coordinate issue resolution to maintain project delivery standards.
• Support the development of secure software delivery processes aligned with enterprise governance and applicable regulatory expectations.
• Provide technical leadership and stakeholder updates on CI/CD integration, application security controls and DevSecOps implementation progress.

Required Skills and Qualifications

Experience:

• Strong professional background in software engineering, particularly with C/C++ or Python.
• Proven hands-on experience in DevSecOps, CI/CD engineering and software release automation.
• Extensive experience designing, developing and refactoring complex CI/CD pipeline automation scripts.
• Practical expertise with GitHub Actions, Python, Bash or YAML for automated software delivery workflows.
• Demonstrated hands-on experience integrating application security scanning tools, particularly Black Duck (SCA) and Coverity (SAST).
• Strong understanding of Static Application Security Testing (SAST) and Software Composition Analysis (SCA) within automated development pipelines.
• Experience working with GitHub Enterprise CI/CD environments and implementing security controls within software delivery processes.
• Ability to prepare technical specifications, Scope of Work documentation and structured implementation plans.
• Experience coordinating technical delivery activities and guiding offshore or distributed engineering teams.

Soft Skills:

• Strong technical leadership skills, with the ability to translate client requirements into clear implementation plans and SOW documentation.
• Excellent cross-cultural communication and stakeholder management capabilities.
• Ability to coordinate effectively between Japanese business stakeholders and international offshore engineering teams.
• Strong analytical thinking, troubleshooting and problem-solving abilities when addressing complex CI/CD and security integration challenges.
• Proactive approach to managing technical delivery risks, implementation priorities and project dependencies.
• Collaborative and delivery-focused mindset, balancing security requirements, engineering efficiency and client expectations.

Language Requirements:

• Japanese: Business-level proficiency is required for communication with domestic clients and stakeholders.
• English: Business-level proficiency is required for collaboration with offshore engineers and international project teams.

Preferred Skills & Qualifications

• Experience preparing software supply chains, development processes or CI/CD pipelines for compliance with the EU Cyber Resilience Act (CRA).
• Familiarity with large-scale embedded software systems and complex software development environments.
• Experience with firmware source code management and associated build or release workflows.
• Understanding of large monolithic codebases and build pipeline optimisation.
• Practical experience in technical project management or PMO activities, including backlog prioritisation and delivery coordination.
• Experience managing client escalations, technical issues and cross-team dependencies in international delivery environments.

About the Company

Our client is a major global technology services and consulting organisation, delivering mission-critical digital transformation and engineering solutions to enterprises in Japan and international markets.

The organisation supports large corporate clients with technology consulting, software engineering, cybersecurity and complex systems integration, helping businesses modernise their technology capabilities.

Its specialised consulting division delivers high-impact DevSecOps and application security transformation programmes for leading global manufacturers and other enterprise clients.

By combining domestic client engagement with offshore engineering expertise, the company provides access to international technical capabilities while maintaining close alignment with Japanese business requirements.

The working environment encourages multicultural collaboration, technical innovation and flexible delivery models, enabling experienced engineers and technical leaders to contribute to complex projects.

Joining this team offers an opportunity to strengthen enterprise CI/CD security, automated vulnerability management and secure software delivery practices while working with internationally distributed engineering specialists.

Why You'll Love Working Here

• Take a leading role in enterprise DevSecOps transformation projects for major international clients.
• Work with Black Duck, Coverity, GitHub Enterprise and advanced CI/CD security automation technologies.
• Contribute to application security, vulnerability management and software supply chain protection.
• Combine hands-on technical engineering with leadership and technical project management responsibilities.
• Gain exposure to international enterprise projects involving Japanese stakeholders and offshore engineering teams.
• Strengthen your expertise in secure software delivery, SAST, SCA and CI/CD pipeline optimisation.
• Work on technically challenging projects where security, development efficiency and regulatory expectations must be carefully balanced.
• Enjoy an exceptionally flexible 99% remote work-from-home arrangement, with Tokyo as the designated work location.
• Receive statutory health, labour and employment insurance coverage from day one.
• Benefit from a casual dress environment and a collaborative international working culture.

Don't Miss Out - Apply Now!