DevSecOps Security Engineer
Role Purpose
Hands-on DevSecOps / Cloud Security Engineer responsible for embedding security across Azure, Azure DevOps and the software delivery lifecycle. You’ll work closely with DevOps, Engineering and Security teams to improve cloud security, CI/CD controls and vulnerability management.
Key Responsibilities
- Implement and maintain security controls across Azure DevOps CI/CD pipelines.
- Manage security tooling including SAST, SCA, secrets, IaC, container and vulnerability scanning.
- Operate and improve Azure security controls, including Defender for Cloud, Entra ID, RBAC/PIM and Key Vault.
- Triage, prioritise and track vulnerabilities and security findings through to remediation.
- Work with Engineering and DevOps teams to resolve security issues without creating unnecessary delivery friction.
- Automate security processes using PowerShell, Python, Azure CLI, Logic Apps or similar.
- Develop runbooks, dashboards, metrics and operational documentation to support security operations and CISO reporting.
- Support security incidents and continually improve security controls and processes.
Essential Experience
- Hands-on experience in DevSecOps, Security Engineering or Cloud Security.
- Strong Azure security experience.
- Experience with Azure DevOps and CI/CD pipelines.
- Practical experience implementing CI/CD security controls such as SAST, SCA, secrets, IaC or container scanning.
- Vulnerability management experience, including triage, prioritisation and remediation.
- Experience working directly with DevOps/Engineering teams.
- Scripting/automation experience with PowerShell, Python, Azure CLI or similar.
Nice to Have
- Microsoft Sentinel / KQL
- Terraform/Bicep
- Container/Kubernetes security
- Defender for Cloud
- Azure/security certifications
Venquis is acting as an Employment Agency in relation to this vacancy.
