Senior Application Security / DevSecOps Engineer (Azure)

Identify Security; Houston (TX); Hybrid; USD 140,000 - 190,000; Full time

Job summary

Identify Security is seeking an experienced Application Security / DevSecOps Engineer to lead and mature an Azure-focused security program for a confidential client in the Houston area. This hands-on role requires shaping the program, integrating security into CI/CD, and guiding remediation across multiple development teams.

You’ll work directly with developers, cloud infrastructure, and cybersecurity teams to implement controls, automate testing, and drive secure software delivery in a hybrid

Qualifications

• 7+ years of experience across application security, DevSecOps, cloud security, software development, or related disciplines.
• Hands-on Microsoft Azure experience focusing on application environments, resource groups and security controls.
• Experience maturing an Application Security / DevSecOps program with practical remediation workflows.
• Experience integrating application security scanning tools into CI/CD pipelines.
• Knowledge of secure SDLC, CI/CD security, and familiarity with DAST.

Responsibilities

• Shape and mature an emerging App Security / DevSecOps program, identifying gaps and priorities.
• Secure and support Microsoft Azure application environments and configurations.
• Implement and integrate application security scanning across development teams and pipelines.
• Establish automated security checkpoints, testing processes, and documentation.
• Identify, track, and remediate vulnerabilities in applications, APIs, and third-party libraries.
• Collaborate with developers to investigate findings, determine remediation, and validate fixes.
• Evaluate tools and practices to improve automation, visibility, and developer adoption.
• Serve as the bridge between development, cloud infrastructure, and cybersecurity teams.

Skills

Azure security

DevSecOps

Application security

CI/CD pipelines

SAST

SCA

DAST

Vulnerability remediation

Security tooling evaluation

Tools

Snyk

Checkmarx

Veracode

SonarQube

Mend

Job description

Senior Application Security / DevSecOps Engineer (Azure)

Employment: Long-Term Contract | Potential Contract-to-Hire

Work Authorization: Must be authorized to work in the U.S. without sponsorship now or in the future. No visa sponsorship or transfers.

About the Opportunity

Identify Security is seeking an experienced Application Security / DevSecOps Engineer to help shape, expand, and implement an application security program for a confidential client.

The organization has begun establishing its DevSecOps capabilities and needs a hands-on engineer who can build on that foundation, identify gaps, and drive implementation across multiple development teams.

This role combines Microsoft Azure application security, DevSecOps engineering, automated security testing, and vulnerability remediation.

You’ll work directly with developers, cloud infrastructure, and cybersecurity teams to establish practical security processes, integrate controls into development workflows, and drive vulnerabilities through remediation.

What You’ll Do

• Help shape and mature an emerging Application Security / DevSecOps program, identifying gaps, priorities, and practical improvements.
• Secure and support Microsoft Azure application environments, including resource groups, application configurations, and associated security controls.
• Implement and integrate application security scanning across multiple development teams and CI/CD pipelines.
• Establish automated security checkpoints, testing processes, standards, and supporting documentation.
• Identify, prioritize, track, and validate remediation of vulnerabilities in applications, code, APIs, and third-party libraries.
• Work directly with developers to investigate findings, determine appropriate remediation, and validate fixes.
• Evaluate security tools and existing practices to improve automation, visibility, and developer adoption.
• Serve as the technical bridge between application development, cloud infrastructure, and cybersecurity teams.
• Independently drive assigned initiatives from planning through implementation and ongoing improvement.

Required Experience

• 7+ years of experience across application security, DevSecOps, cloud security, software development, or related disciplines.
• Strong hands-on Microsoft Azure experience, specifically application environments, resource groups, configurations, and associated security controls—not primarily Entra ID / user administration.
• Demonstrated experience helping build, implement, or mature an Application Security / DevSecOps program.
• Experience implementing or integrating application security scanning tools into development workflows and CI/CD pipelines.
• Practical knowledge of SAST, SCA, vulnerability remediation, secure SDLC, and CI/CD security, with familiarity with DAST.
• Experience working directly with software developers to investigate vulnerabilities, implement remediation, and validate closure.
• Understanding of application architecture, APIs, authentication, authorization, and third-party software dependencies.
• Ability to independently own technical initiatives, solve problems, and drive adoption across multiple teams.

Preferred Experience

• Azure DevOps, GitHub Actions, GitLab, Jenkins, or comparable CI/CD platforms.
• Security testing platforms such as Snyk, Checkmarx, Veracode, SonarQube, Mend, or similar.
• Azure Policy, Key Vault, Defender for Cloud, managed identities, or infrastructure as code.
• Experience onboarding multiple development teams into a centralized security scanning platform.
• Experience improving security processes in an organization where DevSecOps capabilities are still developing.

Location & Employment

• Greater Houston, TX candidates preferred.
• Initial engagement is a long-term contract with remote work flexibility.
• Candidates must be willing and able to work a hybrid schedule in Greater Houston (approximately two days onsite per week) if converted to permanent employment.
• Permanent conversion is a potential future opportunity, subject to business and headcount approval, and is not guaranteed.
• Candidates must be authorized to work in the United States without requiring employer sponsorship now or in the future. Visa sponsorship and transfers are not available.

What Makes Someone Successful Here?

You’ve worked in an environment where application security wasn’t fully established. You helped identify what was missing, implemented scanning and security controls, worked with developers to improve their processes, and made the program more effective.

You understand both the technical work and the challenges of getting development teams to adopt security practices.

You’re a hands-on engineer who can help shape the direction, implement the solutions, and take ownership of the results.