Azure App Security Lead — SSDLC & CI/CD

Cybersecurity Jobs; Olympia (WA); Hybrid; USD 114,000 - 124,000; Full time

Job summary

Cybersecurity Jobs is seeking a Senior Application Security Analyst to guard data and apps across Microsoft Azure and hybrid/multi‑cloud environments. You’ll drive threat modeling, vulnerability management, and secure coding guidance within the SSDLC, collaborating with DevOps and architects to embed security across the SDLC.

Role emphasizes secure design, API and microservices security, and ongoing security testing in CI/CD.

Qualifications

• Seven years of information security experience in specialized roles.
• Knowledge of secure SDLC, secure architecture design, and cloud architecture.
• Experience performing application security code reviews and risk assessments.
• Hands-on with vulnerability assessment tools and security testing (SAST/DAST/SCA).
• Ability to integrate security in CI/CD and DevSecOps practices.
• Experience with threat modeling frameworks like STRIDE and MITRE ATT&CK.

Responsibilities

• Serve as a senior SME for application security across Azure and cloud-native architectures.
• Coordinate security assessments, code reviews, and regulatory compliance activities.
• Support SSDLC implementation and embedding security controls in development workflows.
• Lead vulnerability triage, risk analysis, and remediation prioritization.
• Develop secure coding standards and security training materials for teams.
• Monitor cloud/on‑prem environments and contribute to incident reports and post‑mortem analyses.

Skills

Security architecture

Threat modeling

Vulnerability management

SSDLC/DevSecOps

CI/CD integration

Code reviews

Analytical problem solving

Education

Bachelor's degree in engineering or security

Tools

Nessus

Rapid7

Nmap

Burp Suite

Job description

Cybersecurity Jobs is seeking a Senior Application Security Analyst to guard data and apps across Microsoft Azure and hybrid/multi‑cloud environments. You’ll drive threat modeling, vulnerability management, and secure coding guidance within the SSDLC, collaborating with DevOps and architects to embed security across the SDLC.

Role emphasizes secure design, API and microservices security, and ongoing security testing in CI/CD.