Azure DevSecOps Engineer: Cloud Security & Automation

Venquis; Greater London; In loco; GBP 70.000 - 110.000; Tempo pieno

Descrizione del lavoro

Venquis is seeking a hands-on DevSecOps security engineer to strengthen in-house cloud security across Azure, Azure DevOps and CI/CD pipelines. You will collaborate with Security, DevOps, Engineering and Product teams to embed robust security controls throughout the software delivery lifecycle.

The role emphasizes practical engineering, automation and continuous improvement, focusing on tooling, vulnerability management and secure automation using PowerShell, Python and Azure CLI.

Competenze

• Hands-on experience in DevSecOps and cloud security engineering.
• Practical experience securing Azure environments and cloud infrastructure.
• Experience with Azure DevOps, CI/CD pipelines and software delivery workflows.
• Understanding of security controls including SAST, SCA/dependency scanning, secrets scanning, IaC scanning and container scanning.

Mansioni

• Maintain and improve security tooling across Azure DevOps pipelines, including secrets scanning, SAST, dependency scanning, infrastructure-as-code scanning and container security.
• Triage security findings, support remediation and manage exceptions, ensuring risks are prioritised and tracked.
• Operate and improve Azure security controls, including Entra ID, RBAC/PIM, Key Vault, Log Analytics and Microsoft Defender for Cloud.
• Monitor cloud security posture, identify misconfigurations and vulnerabilities, and coordinate remediation with relevant teams.
• Support vulnerability management across applications, cloud infrastructure, containers and dependencies.
• Work with DevOps and Engineering teams to improve CI/CD security without creating unnecessary delivery friction.
• Automate security processes, reporting and evidence collection using tools such as PowerShell, Python, Azure CLI, Logic Apps or Functions.
• Develop and maintain security runbooks, operating procedures, dashboards and documentation.
• Support incident response and continually improve security controls based on findings and lessons learned.

Conoscenze

DevSecOps

Cloud security

Azure security

CI/CD pipelines

Scripting

Security tooling

Strumenti

Azure DevOps

PowerShell

Python

Azure CLI

Logic Apps

Defender for Cloud

Entra ID

RBAC/PIM

Key Vault

IaC scanning

SAST

SCA

Descrizione del lavoro

Venquis is seeking a hands-on DevSecOps security engineer to strengthen in-house cloud security across Azure, Azure DevOps and CI/CD pipelines. You will collaborate with Security, DevOps, Engineering and Product teams to embed robust security controls throughout the software delivery lifecycle.

The role emphasizes practical engineering, automation and continuous improvement, focusing on tooling, vulnerability management and secure automation using PowerShell, Python and Azure CLI.