Senior DevSecOps Engineer

Senior Dev Sec Ops  Engineer

Virtuous is hiring a Senior Dev Sec Ops  Engineer to strengthen the security posture of our products, cloud infrastructure, and software delivery ecosystem.

Reporting to the Director of IT & Security, you'll partner with Engineering, Cloud Engineering, Dev Ops, Architecture, and Security teams to build security into the way we design, develop, deploy, and operate software. You'll improve the security of our products and cloud environment by reducing security debt, modernizing security practices, and building secure-by-default solutions through automation and engineering.

This role is embedded within a collaborative Dev Ops function and is ideal for someone who enjoys solving security problems through code, automation, and engineering rather than manual reviews or gatekeeping. We're looking for an engineer who is naturally curious, challenges conventional approaches, and safely leverages AI-assisted tooling and modern engineering practices to create scalable, high-impact solutions.

Security Engineering & Cloud Security

• Design, implement, and continuously improve secure Azure cloud architectures, networking, governance, and infrastructure to support scalable, secure-by-default engineering.
• Strengthen cloud security posture through infrastructure hardening, segmentation, secure connectivity patterns, RBAC/PIM, Azure Policy, and automated guardrails.
• Improve security visibility through logging, monitoring, SIEM integrations, detection engineering, and operational security tooling.
• Continuously assess and remediate cloud security risks, inherited infrastructure weaknesses, configuration drift, and operational security gaps.
• Embed security into infrastructure, platforms, and engineering workflows by collaborating with Cloud Engineering and Dev Ops teams to build secure-by-default solutions.

Application Security & Dev Sec Ops

• Identify and address security risks in application architecture, authentication, APIs, and data flows throughout the product lifecycle.
• Integrate security capabilities into CI/CD pipelines and engineering workflows, including SAST, DAST, dependency scanning, secrets management, software supply-chain security, and policy-based controls.
• Lead threat modeling, architecture reviews, and secure design discussions to identify security risks early in the software development lifecycle.
• Build developer-friendly security guardrails, reusable patterns, and automations that improve security without slowing delivery velocity.
• Drive timely remediation of security findings by enabling engineering teams with practical guidance, automation, and secure-by-default patterns.

Security Modernization & Operational Excellence

• Lead efforts to reduce security backlog, cloud governance drift, stale permissions, infrastructure weaknesses, technical debt, and operational security risk.
• Balance risk reduction, engineering impact, and business priorities when determining what to remediate, standardize, automate, or defer.
• Collaborate with Security leadership to improve incident readiness, operational maturity, security visibility, and organizational resilience.
• Help modernize inherited systems while improving container security, Kubernetes security, and secure cloud-native engineering practices.

Automation, AI & Engineering Enablement

• Leverage automation, APIs, scripting, AI-assisted tooling, and emerging technologies to improve security operations, engineering productivity, and organizational effectiveness.
• Continuously challenge traditional approaches by identifying opportunities to automate, simplify, or reimagine security and engineering workflows.
• Build self-service capabilities, reusable tooling, and scalable workflows that improve developer experience while strengthening security outcomes.
• Evaluate and adopt modern engineering practices, AI-assisted workflows, and emerging technologies that improve security outcomes, accelerate remediation, and increase engineering effectiveness.
• Act as a force multiplier across Security, Engineering, and Cloud Operations by creating systems that increase organizational leverage and effectiveness.

• Security controls are embedded into engineering workflows without creating unnecessary friction or slowing delivery velocity.
• Application and cloud security posture improve through strong engineering adoption, operational ownership, and scalable guardrails.
• Security backlog, infrastructure debt, and operational risk are consistently reduced through pragmatic remediation and automation.
• Cloud infrastructure is secure, resilient, observable, and governed through secure-by-default engineering practices.
• Automation, AI-assisted engineering, and intelligent workflows measurably improve team effectiveness, remediation velocity, and operational scalability.
• Engineering, Security, and Cloud teams operate as trusted partners with shared ownership of reliability, security, and business outcomes.

• 5+ years of experience in Security Engineering,…