DevSecOps Engineer

We are looking for an Application Security Engineer to help build and mature our application security and Dev Sec Ops  program. This role will focus on embedding security throughout the software development lifecycle (SDLC)—from design and development through deployment.

• Strong application security with experience securing modern development environments.
• Experience implementing role-based access controls (RBAC) and identity access management practices
  .
• Hands‑on experience performing static and dynamic application security testing
  , including comparative analysis of tools and security findings.
• Experience conducting interactive testing and end‑user acceptance style security reviews
  , approaching applications from an attacker perspective to identify weaknesses.
• Experience embedding security into the software development lifecycle (SDLC) from design through deployment.
• Experience implementing and securing CI/CD pipelines
  , including automated security checks within development workflows.
• Experience working in cloud environments, particularly Azure
  , and supporting containerized platforms such as Kubernetes
  .
• Experience implementing secure coding practices and guiding developers on secure application design
  .
• Ability to automate security processes and integrate security tooling into development pipelines
  .
• Experience working with security tools such as Crowd Strike, Microsoft Defender, and Git Hub Advanced Security
  .
• Ability to develop draft security policies, standards, and processes related to application security and secure development.
• Experience collaborating with Dev Ops teams and cross‑functional engineering teams through regular standups and project meetings.
• Strong ability to influence change, advocate for security best practices, and drive improvements across development teams
  .
• Experience supporting software approval processes and evaluating development tools for security and compliance considerations
  .
• Ability to help build and mature an application security program within a growing organization
  .