Security Engineer

Venquis; Greater London; On-site; GBP 70,000 - 110,000; Full time

Job summary

Venquis is seeking a hands-on DevSecOps security engineer to strengthen in-house cloud security across Azure, Azure DevOps and CI/CD pipelines. You will collaborate with Security, DevOps, Engineering and Product teams to embed robust security controls throughout the software delivery lifecycle.

The role emphasizes practical engineering, automation and continuous improvement, focusing on tooling, vulnerability management and secure automation using PowerShell, Python and Azure CLI.

Qualifications

• Hands-on experience in DevSecOps and cloud security engineering.
• Practical experience securing Azure environments and cloud infrastructure.
• Experience with Azure DevOps, CI/CD pipelines and software delivery workflows.
• Understanding of security controls including SAST, SCA/dependency scanning, secrets scanning, IaC scanning and container scanning.

Responsibilities

• Maintain and improve security tooling across Azure DevOps pipelines, including secrets scanning, SAST, dependency scanning, infrastructure-as-code scanning and container security.
• Triage security findings, support remediation and manage exceptions, ensuring risks are prioritised and tracked.
• Operate and improve Azure security controls, including Entra ID, RBAC/PIM, Key Vault, Log Analytics and Microsoft Defender for Cloud.
• Monitor cloud security posture, identify misconfigurations and vulnerabilities, and coordinate remediation with relevant teams.
• Support vulnerability management across applications, cloud infrastructure, containers and dependencies.
• Work with DevOps and Engineering teams to improve CI/CD security without creating unnecessary delivery friction.
• Automate security processes, reporting and evidence collection using tools such as PowerShell, Python, Azure CLI, Logic Apps or Functions.
• Develop and maintain security runbooks, operating procedures, dashboards and documentation.
• Support incident response and continually improve security controls based on findings and lessons learned.

Skills

DevSecOps

Cloud security

Azure security

CI/CD pipelines

Scripting

Security tooling

Tools

Azure DevOps

PowerShell

Python

Azure CLI

Logic Apps

Defender for Cloud

Entra ID

RBAC/PIM

Key Vault

IaC scanning

SAST

SCA

Job description

Job type: Permanent

Specialism: Cyber Security / Cloud Security / DevSecOps

About the role

We are recruiting on behalf of a client looking to strengthen its in-house security engineering capability.

This is a hands‑on role focused on improving security across Azure, Azure DevOps, CI/CD pipelines and cloud infrastructure. You’ll work closely with Security, DevOps, Engineering and Product teams to implement and improve security controls, manage vulnerabilities and embed security throughout the software delivery lifecycle.

The focus is on practical engineering, automation and continuous improvement rather than policy development alone.

Key responsibilities

• Maintain and improve security tooling across Azure DevOps pipelines, including secrets scanning, SAST, dependency scanning, infrastructure-as-code scanning and container security.
• Triage security findings, support remediation and manage exceptions, ensuring risks are prioritised and tracked.
• Operate and improve Azure security controls, including Entra ID, RBAC/PIM, Key Vault, Log Analytics and Microsoft Defender for Cloud.
• Monitor cloud security posture, identify misconfigurations and vulnerabilities, and coordinate remediation with relevant teams.
• Support vulnerability management across applications, cloud infrastructure, containers and dependencies.
• Work with DevOps and Engineering teams to improve CI/CD security without creating unnecessary delivery friction.
• Automate security processes, reporting and evidence collection using tools such as PowerShell, Python, Azure CLI, Logic Apps or Functions.
• Develop and maintain security runbooks, operating procedures, dashboards and documentation.
• Support incident response and continually improve security controls based on findings and lessons learned.

About you

• Hands‑on experience in DevSecOps, cloud security engineering, security operations or a related role.
• Practical experience securing Azure environments and cloud infrastructure.
• Experience with Azure DevOps, CI/CD pipelines and software delivery workflows.
• Understanding of security controls including SAST, SCA/dependency scanning, secrets scanning, IaC scanning and container scanning.
• Experience with Microsoft Defender for Cloud, Entra ID, RBAC/PIM, Key Vault or similar security tooling.
• Ability to assess vulnerabilities, prioritise risk and work with technical teams to resolve issues.
• Scripting or automation experience using PowerShell, Python, Azure CLI or similar.
• A pragmatic approach to security, with the ability to improve controls while supporting efficient delivery.

Relevant certifications such as AZ-500, SC-100, Security+, CySA+, CISSP or CCSP are beneficial but not essential. Experience with ISO 27001, SOC 2 or NIST frameworks is also advantageous.

The opportunity

Join a team building stronger in‑house security capabilities, with the opportunity to take ownership of security engineering, improve cloud security and embed DevSecOps practices across the organisation.