Senior Application Security Engineer

Sr. DevSecOps Engineer | Marietta, GA | $135-155k base salary

Position Overview

Do you thrive on optimizing software development workflows, boosting product delivery speed, and incorporating security into the development process from the start? Are you skilled in working with cross-functional teams to create secure, scalable, and high-performance cloud infrastructure in Azure? Do you have a solid background in Azure DevOps and other Azure services, as well as an understanding of security protocols and Oracle Cloud Infrastructure (OCI)? If so, we’d love to have you on board as a Senior DevSecOps Engineer in our infrastructure team!

Is This You?

In the role of Senior DevSecOps Engineer, you will partner with security, development, business intelligence, infrastructure, and operations teams to design and implement secure, efficient cloud-based infrastructure and applications in Azure. A key focus of this position will be to integrate security practices directly into the DevOps lifecycle, ensuring the creation of secure software delivery pipelines and adopting a proactive approach to security throughout development.

Key Responsibilities

• Develop and manage an Azure-based infrastructure that is highly available, scalable, and secure, prioritizing security at every stage.
• Embed security within CI/CD pipelines using Azure DevOps (SAST/DAST/SCA), with an emphasis on identifying and addressing vulnerabilities early in the process.
• Work collaboratively with security and development teams to enforce security standards and practices, strengthening our shift-left security initiatives.
• Oversee the management and consolidation of Azure DevOps organizations, ensuring that the DevOps environment is securely configured and maintained.
• Automate key processes using secure scripting languages (e.g., PowerShell, Python, Bash), with a focus on security monitoring and compliance validation.
• Monitor and troubleshoot the performance, capacity, and security of Azure-based systems, ensuring optimal functioning.
• Design and execute disaster recovery and business continuity strategies, considering security needs within the Azure environment.
• Stay up to date with the latest advancements in Azure, OCI, DevSecOps, and security best practices to continuously improve our practices.

Qualifications

• A Bachelor's degree in a relevant field, or an Associate degree with two years of college and five years of related work experience, or seven years of relevant work experience. Relevant certifications in Azure and DevSecOps are highly valued.
• Proficient in scripting languages (e.g., PowerShell, Python) for automating security tasks, with experience in secure configuration management (e.g., Ansible).
• Strong problem-solving abilities, particularly in identifying and mitigating security vulnerabilities.

Preferred Qualifications

• In-depth knowledge of Azure infrastructure and security services such as Azure Security Center, Sentinel, VMs, Kubernetes, and App Services.
• Hands-on experience with Infrastructure as Code (IaC) tools, particularly with a security-first approach (e.g., Terraform, Bicep).
• Familiarity with containerization and securing containerized environments (e.g., Docker, Kubernetes) in Azure.
• Excellent communication skills with the ability to explain security concepts clearly and collaborate across teams.

*No Visa Sponsorship or c2c employment available at this time*