DevSecOps Engineer: Secure SaaS, Pipelines & Azure

ePayPolicy; Austin (TX); Hybrid; USD 120,000 - 180,000; Full time

Benefits offered by this job

Competitive salary

401K

Comprehensive benefits

Flexible PTO

Lunch stipend onsite

Open communication

Growth opportunities

Fully-stocked kitchen

AI initiative

Job summary

ePayPolicy in Austin, TX is seeking a DevSecOps Engineer to join our Information Security team. You will bridge security and engineering to keep our SaaS payment platform secure by design while preserving velocity and innovation.

Reporting to the Head of Information Security, you will own SAST/SCA tooling, perform targeted web app pen tests, manage Cloudflare edge controls, and collaborate with the Tech Debt and Platform teams to triage and remediate vulnerabilities.

Qualifications

• 3–5+ years of hands-on Application Security or Security Engineering in a modern Azure-hosted SaaS environment.
• Experience securing applications built on .NET Framework, .NET 10, and SQL.
• Deep familiarity with Azure PaaS components, serverless functions, and Cloudflare edge controls.
• Hands-on experience in manual web application penetration testing and API security assessments.
• Experience integrating security tooling into CI/CD pipelines.

Responsibilities

• Own application security guardrails and tooling (SAST/SCA).
• Lead targeted internal web application penetration testing for high-risk releases.
• Manage edge security controls (Cloudflare WAF) and collaborate with Tech Debt and Platform teams.
• Triage vulnerabilities and translate scanner outputs into actionable tickets with reproduction steps.
• Monitor security metrics and SLA targets and report findings to engineering teams.

Skills

Application Security

Security Engineering

Penetration Testing

CI/CD Security

Azure

Cloudflare

SAST/SCA

Tools

SonarQube

NPM scanners

NuGet scanners

Azure DevOps

GitHub Actions

Cloudflare WAF

Job description

ePayPolicy in Austin, TX is seeking a DevSecOps Engineer to join our Information Security team. You will bridge security and engineering to keep our SaaS payment platform secure by design while preserving velocity and innovation.

Reporting to the Head of Information Security, you will own SAST/SCA tooling, perform targeted web app pen tests, manage Cloudflare edge controls, and collaborate with the Tech Debt and Platform teams to triage and remediate vulnerabilities.