Senior Application Security​/DevSecOps Engineer; Azure

Employment:
Long-Term Contract | Potential Contract-to-Hire

Work Authorization:
Must be authorized to work in the U.S. without sponsorship now or in the future. No visa sponsorship or transfers.

Identify Security is seeking an experienced Application Security / Dev Sec Ops  Engineer to help shape, expand, and implement an application security program for a confidential client.

The organization has begun establishing its Dev Sec Ops  capabilities and needs a hands-on engineer who can build on that foundation, identify gaps, and drive implementation across multiple development teams.

This role combines Microsoft Azure application security, Dev Sec Ops  engineering, automated security testing, and vulnerability remediation
.

You’ll work directly with developers, cloud infrastructure, and cybersecurity teams to establish practical security processes, integrate controls into development workflows, and drive vulnerabilities through remediation.

• Help shape and mature an emerging Application Security / Dev Sec Ops  program
  , identifying gaps, priorities, and practical improvements.
• Secure and support Microsoft Azure application environments
  , including resource groups, application configurations, and associated security controls.
• Implement and integrate application security scanning across multiple development teams and CI/CD pipelines.
• Establish automated security checkpoints, testing processes, standards, and supporting documentation.
• Identify, prioritize, track, and validate remediation of vulnerabilities in applications, code, APIs, and third-party libraries.
• Work directly with developers to investigate findings, determine appropriate remediation, and validate fixes.
• Evaluate security tools and existing practices to improve automation, visibility, and developer adoption.
• Serve as the technical bridge between application development, cloud infrastructure, and cybersecurity teams.
• Independently drive assigned initiatives from planning through implementation and ongoing improvement.

• 7+ years of experience across application security, Dev Sec Ops , cloud security, software development, or related disciplines.
• Strong hands-on Microsoft Azure experience
  , specifically application environments, resource groups, configurations, and associated security controls—not primarily Entra  / user administration.
• Demonstrated experience helping build, implement, or mature an Application Security / Dev Sec Ops  program.
• Experience implementing or integrating application security scanning tools into development workflows and CI/CD pipelines.
• Practical knowledge of SAST, SCA, vulnerability remediation, secure SDLC, and CI/CD security
  , with familiarity with DAST.
• Experience working directly with software developers to investigate vulnerabilities, implement remediation, and validate closure.
• Understanding of application architecture, APIs, authentication, authorization, and third-party software dependencies.
• Ability to independently own technical initiatives, solve problems, and drive adoption across multiple teams.

• Azure Dev Ops, Git Hub Actions, Git Lab, Jenkins, or comparable CI/CD platforms.
• Security testing platforms such as Snyk, Checkmarx, Veracode, Sonar Qube, Mend, or similar.
• Azure Policy, Key Vault, Defender for Cloud, managed identities, or infrastructure as code.
• Experience onboarding multiple development teams into a centralized security scanning platform.
• Experience improving security processes in an organization where Dev Sec Ops  capabilities are still developing.

• Greater Houston, TX candidates preferred.
• Initial engagement is a long-term contract with remote work…