SaaS Cloud Security Engineer - Azure & DevSecOps

FOSS group; Hillerød; On-site; DKK 700,000 - 1,000,000; Full time

Job summary

FOSS Group is seeking a SaaS Security Engineer to strengthen the cloud security posture of IQX, our cloud platform. You will work closely with SRE, DevOps, and R&D teams to implement standardized security controls across Microsoft platforms, including Entra ID and Defender for Cloud.

You will drive risk assessment processes, support secure development practices, and ensure consistent security monitoring and incident handling across IQX and corporate IT.

Qualifications

• Solid grounding in application and cloud security, with real development team experience.
• Hands-on experience securing Azure and Microsoft security stack (Defender for Cloud, Entra ID, Sentinel).
• Experience with SAST and SCA tooling like SonarQube, including gate design.
• Security risk assessment experience: identifying, rating, and following up risks.
• Technical background with planning, prioritization, and long-term thinking.

Responsibilities

• Own the cloud security posture of IQX: Defender for Cloud findings, secure score, and Azure recommendations.
• Identify and follow up security risks for the platform as part of risk management.
• Work with Entra ID, Defender, and Sentinel to align identity and monitoring standards.
• Manage SAST/SCA tooling with R&D and quality gates.
• Provide security input into architecture and design.
• Strengthen secure development and operations practices and track targets.

Skills

Cloud security

Secure SDLC

DevSecOps

Security risk assessment

Threat modeling

Tools

Microsoft Defender for Cloud

Entra ID

Microsoft Sentinel

Azure

SAST

SCA tooling

Job description

FOSS Group is seeking a SaaS Security Engineer to strengthen the cloud security posture of IQX, our cloud platform. You will work closely with SRE, DevOps, and R&D teams to implement standardized security controls across Microsoft platforms, including Entra ID and Defender for Cloud.

You will drive risk assessment processes, support secure development practices, and ensure consistent security monitoring and incident handling across IQX and corporate IT.