Senior DevSecOps Engineer

Job Summary

Focused on improving and securing software delivery practices, the full-time Senior DevSecOps Engineer will work remotely to embed security into the software development lifecycle, implement CI/CD security automation, and lead efforts in application security across development teams.

Key responsibilities:

• Embed security practices, tools, and automation into the software development lifecycle to support CI/CD pipelines
• Lead initiatives to identify, prioritize, and mitigate security risks in applications, providing expertise on secure coding and threat modeling
• Utilize Azure Cloud services to ensure secure infrastructure deployment and manage secrets effectively

Required qualifications:

• Minimum of 5 years of experience in application security, DevSecOps, or a related field
• Strong hands-on experience with securing applications in Azure environments and familiarity with Azure-native security tools
• Expertise in security tools such as SAST, DAST, and software composition analysis (SCA)
• In-depth understanding of the secure development lifecycle (SDLC) and DevSecOps best practices
• Experience with vulnerability management practices and security compliance frameworks such as OWASP and NIST