Azure DevSecOps Engineer: Secure CI/CD (Hybrid, London)

Cognizant Technology Solutions Corporation; City Of London; Hybrid; GBP 70,000 - 90,000; Full time

Job summary

Cognizant Technology Solutions Corporation in London (Hybrid) is seeking an Azure DevOps Engineer to design and secure CI/CD pipelines and Azure resources. The role emphasizes DevSecOps practices, vulnerability management, and enforcing security across the SDLC.

You will work with Azure Sentinel, Azure Monitor, and other security tools to detect threats and ensure compliance with regulatory requirements while collaborating with cross-functional teams on secure architectures.

Qualifications

• Hands-on experience with Azure Sentinel (SIEM).
• Experience with Azure and cloud security best practices.
• Strong knowledge of DevOps and GitOps concepts, with Azure DevOps Repos and Pipelines security.
• Hands-on experience integrating SAST, SCA and DAST into CI/CD pipelines.
• Experience implementing security across the SDLC, including container security.

Responsibilities

• Design, build and maintain secure CI/CD pipelines in Azure DevOps to deploy Azure resources.
• Secure Azure DevOps repositories and pipelines, and enforce quality gates and deployment best practices.
• Integrate SAST, SCA, DAST and container security scanning into CI/CD pipelines.
• Identify, classify and mitigate vulnerabilities in line with security best practices.
• Design and propose security solutions aligned with Zero Trust principles.

Skills

Azure Sentinel

Azure

DevOps

GitOps

Security best practices

CI/CD pipelines

SAST/DAST/SCA

Vulnerability management

Security across SDLC

Tools

Azure DevOps Repos

Azure Pipelines

Azure Monitor

Log Analytics

Job description

Cognizant Technology Solutions Corporation in London (Hybrid) is seeking an Azure DevOps Engineer to design and secure CI/CD pipelines and Azure resources. The role emphasizes DevSecOps practices, vulnerability management, and enforcing security across the SDLC.

You will work with Azure Sentinel, Azure Monitor, and other security tools to detect threats and ensure compliance with regulatory requirements while collaborating with cross-functional teams on secure architectures.