Engineer III - DevSec

Overview

Position: Engineer III - DevSecOps (6 to 10 years of experience in Secure Application Development & Azure Security Engineering)

Job Summary:

We are seeking a highly skilled and experienced Security Development Engineer (SecDev Engineer - III) to design, develop, and secure enterprise-grade products and solutions built on Microsoft technologies. This role demands expertise in secure software development, DevSecOps practices, and cloud security, with a strong focus on embedding security into the development lifecycle. You will play a critical role in ensuring secure, scalable, and resilient application development across our platforms.

Key responsibilities:

Design, develop, and maintain secure applications across cloud and on-prem environments. Implement secure coding practices and integrate security into the SDLC (DevSecOps). Perform code reviews, vulnerability assessments, and remediation. Build and manage secure CI/CD pipelines with integrated security controls. Design and implement Azure cloud security controls. Implement identity and access management (Azure AD, RBAC). Perform threat modelling and risk assessments. Improve monitoring and threat detection capabilities. Collaborate with DevOps, InfraOps, and Security teams. Mentor junior engineers and contribute to documentation. Technology skills, Competencies and Experience: Application & Security Engineering: .NET / API / web application security experience Secure coding practices (OWASP Top 10) Experience with SAST, DAST tools Strong understanding and Experience in executing a Security Software Development lifecycle Gathering/Identifying Security and Privacy requirements Performing Security and Privacy Risk Assessments in support of the development process Providing guidance on controls and mitigations for reported security issues Experience protecting sensitive data and vulnerabilities on Cloud resources Hands-on experience with web application penetration testing Excellent communication - verbal and written Leadership qualities including self-accountability, work-prioritization, meeting facilitation, time management, team co-ordination

Cloud & Microsoft Stack: Azure IaaS and PaaS services App Services, Functions, Key Vault, Networking,Logic apps

Identity & Access Management: Azure AD, RBAC, Conditional Access OAuth and OpenID Connect

DevSecOps & Automation: Azure DevOps / GitHub Actions / Jenkins Infrastructure as Code (Terraform, ARM, Bicep)

Monitoring & Threat Detection: Microsoft Defender, Azure Sentinel (preferred) Log analysis and alert response

Scripting & Automation: PowerShell Python / Bash (preferred)

Qualification: Bachelor's degree in Computer Science, Information Technology, or a related field.

Experience: 6 to 10 years of overall IT experience. 3-5 years in application security, cloud security, or DevSecOps. Experience in enterprise product or solution development preferred. Nice to have: Azure security certifications (AZ-500, SC-200, SC-300) Knowledge of threat modeling frameworks (STRIDE, MITRE) Experience in API security Experience in GenAI related solutioning for security review Integrate AI-enabled security tools into CI/CD pipelines to support continuous security validation

Work location: Wipfli India, Bengaluru