Senior DevSecOps Engineer - Remote Cloud Security & AI

CreateFuture; United States; Remote; USD 140,000 - 200,000; Full time

Benefits offered by this job

35 days leave including holidays

Private medical insurance

Enhanced parental leave

5% pension match

Job summary

CreateFuture is seeking a Sr. DevSecOps Engineer to secure client cloud environments and build AI-powered tooling. You will design security controls across Azure, implement threat modelling, and lead secure reviews in regulated industries like iGaming and healthcare-tech.

You will mentor teams, enhance CI/CD security, and coordinate incident response while delivering practical remediation guidance and governance across projects.

Qualifications

• Production experience operating in a multi-region Azure environment.
• Proven experience in a senior DevSecOps / Application Security engineering role.
• Proven experience working in SDLC as Dev, Quality engineer or DevOps.
• Proven experience in a consulting setting and mindset.
• Strong infrastructure-as-code skills, particularly Terraform Azure security experience (Entra ID, PIM, CAP, Policy, Defender, Sentinel).
• Practical experience with CI/CD security integration (Azure DevOps, GitHub Actions).
• Deep knowledge of OWASP frameworks, secure SDLC, and application security assessment.
• Experience conducting or coordinating penetration testing and threat modelling.
• Experience with secure code and architecture review, ideally in regulated or high-compliance environments such as iGaming, fintech, or healthcare.
• Hands-on involvement in security incident response and handling.
• Familiar with how the infosec team operates, including GRC, TPRM and SOC capability.
• Familiar with common SIEM and SOAR platforms, their workflows and underlying data structure.
• Strong communication skills
• Experience with compliance and regulatory analysis (GDPR, PCI DSS, or similar)
• Experience building AI-powered security tooling using Claude Code, StrandsAgent, AWS AgentCore, or similar agentic frameworks
• Experience in iGaming, lottery, or other highly regulated digital sectors

Responsibilities

• Lead cloud security design across Azure using Terraform and Azure AD tooling.
• Develop and implement application security controls and SAST/DAST in CI/CD.
• Run threat modelling sessions and secure architecture/code reviews.
• Perform white-box pentesting and deliver remediation guidance.
• Coordinate incident response activities with engineers and stakeholders.
• Drive end-to-end remediation including firewall configurations and Entra ID controls.
• Build and evolve AI-powered security tooling to automate workflows.
• Perform compliance analysis and implement controls aligned to standards.
• Mentor DevSecOps engineers and onboarding teams on security best practices.
• Present security posture and remediation roadmaps to senior stakeholders.

Skills

Cloud security

Terraform Azure security

Entra ID / PIM / CAP / Defender / Sent

Application security engineering

SDLC security / threat modelling

CI/CD security integration

Penetration testing

Incident response coordination

AI-powered security tooling

GRC / regulatory analysis

Communication with stakeholders

Tools

Terraform

Azure DevOps

GitHub Actions

OWASP ZAP

Burp Suite

Sentinel

Defender

Claude Code

StrandsAgent

AWS/Azure security tooling

Job description

CreateFuture is seeking a Sr. DevSecOps Engineer to secure client cloud environments and build AI-powered tooling. You will design security controls across Azure, implement threat modelling, and lead secure reviews in regulated industries like iGaming and healthcare-tech.

You will mentor teams, enhance CI/CD security, and coordinate incident response while delivering practical remediation guidance and governance across projects.