Senior DevSecOps Engineer: Secure SDLC & Azure

Wilson Elser - Business & Legal Professionals; New York (NY); On-site; USD 150,000 - 180,000; Full time

Benefits offered by this job

401k match

Generous PTO

Corporate discount plans

Job summary

Wilson Elser is seeking a Senior Application Security Engineer to mature the SSDLC program and bridge Security with Application Development. You will collaborate with engineering leadership to embed secure practices into the software development lifecycle for Azure-hosted services and CI/CD pipelines.

The role combines hands-on security with development experience, focusing on securing SSDLC, DevSecOps tooling, threat modeling, and secure architecture reviews while partnering with

Qualifications

• 5+ years of experience in Application Security, DevSecOps, or related fields.
• Hands-on in securing CI/CD pipelines and modern development workflows.
• Experience collaborating with development teams in Agile environments.
• Strong understanding of OWASP Top 10 and secure SDLC practices.

Responsibilities

• Lead and mature the SSDLC program across applications and platforms.
• Embed secure-by-design principles into development workflows.
• Perform threat modeling and secure architecture assessments.
• Review code to identify and remediate vulnerabilities.
• Establish secure coding standards and reusable templates.
• Develop dashboards and metrics for security posture and SLAs.
• Integrate security tooling into Azure DevOps pipelines.

Skills

SSDLC

DevSecOps

CI/CD Pipelines

Threat Modeling

Secure SDLC

Vulnerability Management

OWASP Top 10

Communication Skills

Collaboration

Tools

SonarQube

PowerShell

Python

.NET

React

PHP

Azure DevOps

Databricks

Power Platform / Power Apps

Job description

Wilson Elser is seeking a Senior Application Security Engineer to mature the SSDLC program and bridge Security with Application Development. You will collaborate with engineering leadership to embed secure practices into the software development lifecycle for Azure-hosted services and CI/CD pipelines.

The role combines hands-on security with development experience, focusing on securing SSDLC, DevSecOps tooling, threat modeling, and secure architecture reviews while partnering with