Azure & Hybrid Cloud Security Engineer

Poland and Central-Eastern Europe; United States; Remote; USD 140,000 - 190,000; Full time

Job summary

Xebia is seeking a seasoned Cloud Security and Application Security expert to join our team. You will assess security posture, organize tests, and guide remediation across Azure and hybrid environments while embedding Security by Design into our development processes.

You will work with DevOps and security teams, translate technical risk into business terms, and help shape security strategy with governance frameworks such as CAF/WAF.

Qualifications

• Experience in cloud and application security across Azure and hybrid environments.
• Experience with security testing, risk assessment, and threat modelling.
• Ability to translate complex security topics into business language.
• Experience with DevSecOps and integrating security in CI/CD.

Responsibilities

• Assess and document the security posture of cloud-based SaaS and on-premises services.
• Coordinate penetration tests, code scanning, cloud infra scanning, and pipeline security assessments.
• Identify security gaps and help teams remediate risks.
• Establish minimum security requirements across products and teams.
• Drive adoption of Security by Design across cloud and apps.
• Define and improve cloud security practices for Azure-based and hybrid environments.
• Integrate security controls into development and CI/CD processes.
• Support development of a security roadmap and drive continuous improvements.

Skills

Cloud Security

Application Security

Azure security

Hybrid security

AWS security

Cloud governance

Threat modelling

Vulnerability management

Security by Design

DevSecOps

CI/CD security

Azure DevOps

GitHub Actions

GitLab CI/CD

Windows Server

Kubernetes security

Security frameworks

Stakeholder management

English proficiency

Tools

Azure DevOps

GitHub Actions

GitLab CI/CD

Terraform

Kubernetes

Job description

Xebia is seeking a seasoned Cloud Security and Application Security expert to join our team. You will assess security posture, organize tests, and guide remediation across Azure and hybrid environments while embedding Security by Design into our development processes.

You will work with DevOps and security teams, translate technical risk into business terms, and help shape security strategy with governance frameworks such as CAF/WAF.