Senior DevSecOps Engineer: Azure Security & Automation

Doist; Phoenix (AZ); On-site; USD 140,000 - 200,000; Full time

Benefits offered by this job

Market competitive pay

Bonusly recognition

401(k) with company match

Unlimited PTO

Paid volunteer days

Healthcare benefits (medical, dental,,

Parental leave (12 weeks primary)

Company outings

Job summary

Virtuous is seeking a Senior DevSecOps Engineer to strengthen the security posture of our products, cloud infrastructure, and software delivery ecosystem. You will partner with Engineering, Cloud Engineering, DevOps, Architecture, and Security teams to build security into design, development, deployment, and operation.

The role emphasizes automation, AI-assisted tooling, and secure-by-default patterns to scale security across the stack.

Qualifications

• 5+ years of experience in Security Engineering, Application Security, Cloud Security, DevSecOps, or related security-focused engineering roles within cloud-native SaaS environments.
• Strong experience designing, securing, and modernizing Azure environments, including Azure networking, governance, RBAC/PIM, Azure Policy, and secure connectivity patterns.
• Experience improving application security through secure SDLC practices, threat modeling, CI/CD security controls, and engineering partnership.
• Hands-on experience implementing DevSecOps capabilities such as SAST, DAST, dependency scanning, secrets management, software supply-chain security, and policy automation.
• Experience with Kubernetes, Docker, container security, IaC, and modern cloud-native platforms.
• Hands-on experience with GitHub, GitHub Actions, GitHub Advanced Security (or equivalent), SIEM platforms, observability tooling, and cloud security technologies.
• Strong automation, scripting, troubleshooting, and cross-functional collaboration skills, with a focus on scalable solutions and operational improvement.
• Experience leveraging AI-assisted engineering tools and a demonstrated curiosity for applying automation and emerging technologies to improve security and engineering outcomes.

Responsibilities

• Design, implement, and improve secure Azure cloud architectures and governance.
• Strengthen cloud security posture with RBAC/PIM, Azure Policy, and secure connectivity patterns.
• Improve security visibility via logging, monitoring, SIEM, and observability tooling.
• Remediate cloud security risks and configuration drift across environments.
• Embed security into infrastructure, platforms, and engineering workflows with secure-by-default patterns.
• Identify and address security risks in application architecture, APIs, and data flows.
• Integrate security into CI/CD with SAST, DAST, secrets management, and software supply-chain security.
• Lead threat modeling and secure design discussions to identify risks early in the SDLC.
• Build developer-friendly security guardrails and automation to improve velocity without sacrificing security.
• Remediate findings with practical guidance, automation, and secure-by-default patterns.
• Drive timely remediation and improve incident readiness and resiliency.

Skills

Security Engineering

Cloud Security

DevSecOps

Application Security

Azure Security

RBAC/PIM

SAST/DAST

CI/CD Security

Kubernetes

Docker

IaC

GitHub Actions

SIEM

Observability

AI-assisted tooling

Tools

Azure

Kubernetes

Docker

GitHub Actions

SIEM

Terraform

IaC tooling

Job description

Virtuous is seeking a Senior DevSecOps Engineer to strengthen the security posture of our products, cloud infrastructure, and software delivery ecosystem. You will partner with Engineering, Cloud Engineering, DevOps, Architecture, and Security teams to build security into design, development, deployment, and operation.

The role emphasizes automation, AI-assisted tooling, and secure-by-default patterns to scale security across the stack.