DevSecOps Engineer

This position is not eligible for sponsorship, including OPT. Candidates must be a US Citizen or Green Card Holder.

We are seeking candidates who will embrace our Cyber Security strategy in the design, implementation, and operations of Cloud Security with a focus on Azure. As an Azure Security Engineer, you should be hands‑on in all aspects of Azure security including implementing security controls and threat protection, managing identity and access management, implementing security policies, and utilizing Azure technologies.

Your responsibilities will include implementing security services in cloud‑based programs based on pre‑defined architectures, managing the security posture, identifying and remediating vulnerabilities, performing threat‑modeling, implementing threat protection, and responding to security incident escalations.

Your day‑to‑day tasks will be:

• Implement, maintain and improve the security posture of the Azure platform, identifying and remediating vulnerabilities using a variety of security tools.
• Implement and configure security controls and policies, manage access to data, and monitor threats to ensure that data, apps, containers, infrastructure, and networks are protected.
• Configure access within a cloud solution environment using the defense‑in‑depth principle.
• Configure network security including in a hybrid context with traditional network‑centric controls.
• Implement and use cloud native tools like Log Analytics, Azure Monitor, Azure Security Center and Azure Sentinel.

• Experience with Network Security, Cyber Defense, Vulnerability Management, Security Architecture, and Cloud Environment.
• Good understanding of security concepts (Zero Trust Network, CASB, Cloud computing, SIEM solutions, PKI, Dev Sec Ops , IAM and PAM).
• Experience with Azure security components; experience with other Cloud Platforms like AWS and Google Cloud is nice‑to‑have.
• Technical skills with Linux and Windows operating systems and scripting languages like Power Shell, Python, .NET.
• Knowledge of Linux/Unix & Windows OS.
• Good knowledge of HTTP, HTTPS, SSL, and authentication technologies.
• Be a “geek” in one specific technical domain – can be outside of the ones mentioned here.
• Agile, Scrum, Dev Sec Ops  knowledge is an asset.

• Azure Security Engineer, CompTIA Security+, or SANS certification preferred. Also industry certifications such as CISSP, CSSP, CCSK, GIAC, CEH are considered beneficial.