Senior DevSecOps Engineer: Azure Security & CI/CD Lead

HCSS; Sugar Land (TX); On-site; USD 120,000 - 180,000; Full time

Benefits offered by this job

Remote work

Medical insurance

Dental insurance

Vision coverage

Holidays

ERGs

On-site amenities

401(k) 5% match

Job summary

HCSS, based in Sugar Land, TX, is seeking a Senior DevOps Engineer with a strong focus on DevSecOps and application security. You will improve, secure, and standardize software delivery across development teams, embedding security into CI/CD pipelines and SDLC practices.

You will lead SAST/DAST/SCA initiatives, manage secrets and cloud security in Azure, and collaborate with engineering, security, and operations to deliver secure software at scale.

Qualifications

• Minimum of 5 years in application security, DevSecOps, or related field with focus on secure software delivery.
• Experience securing applications in Azure environments using Azure-native tools.
• Expertise in SAST/DAST/SCA and secrets management integrated into CI/CD.

Responsibilities

• Embed security into the full SDLC and CI/CD pipelines.
• Lead efforts to identify, prioritize, and remediate security risks and vulnerabilities.
• Utilize Azure cloud services to ensure secure deployments and configurations.
• Lead SAST/DAST testing to identify and remediate code and runtime vulnerabilities.
• Manage secrets and software composition analyses to comply with security policies.
• Develop IaC automation with Terraform for secure cloud environments.
• Create and enforce security policies aligning with OWASP/NIST/CIS.

Skills

5+ years experience

DevSecOps

Application security

Cloud security

Threat modeling

Communication

Tools

SAST

DAST

SCA

Secrets management

Azure Key Vault

CI/CD security

Job description

HCSS, based in Sugar Land, TX, is seeking a Senior DevOps Engineer with a strong focus on DevSecOps and application security. You will improve, secure, and standardize software delivery across development teams, embedding security into CI/CD pipelines and SDLC practices.

You will lead SAST/DAST/SCA initiatives, manage secrets and cloud security in Azure, and collaborate with engineering, security, and operations to deliver secure software at scale.