DevSecOps Engineer

Responsibilities

• Continuous monitoring of security alerts across Azure, OCI, and Microsoft 365 environments using Microsoft Sentinel and Defender.

• Designing and maintaining incident response automation workflows (SOAR) using Azure Logic Apps.

• Detecting and automatically remediating cloud misconfigurations using CSPM solutions.

• Securing cloud environments supporting AI and LLM-based workloads.

• Creating, tuning, and optimizing detection rules and KQL queries in Microsoft Sentinel.

• Monitoring the security of containers, microservices, and Kubernetes/Docker environments.

• Integrating SAST, DAST, and SCA security tools into CI/CD pipelines as part of DevSecOps practices.

• Supporting SOC operations and participating in cloud incident investigations and root cause analysis (RCA).

Requirements

• 3-5 years of experience in cloud security, particularly within Azure, OCI, and Microsoft 365 environments.

• Strong knowledge of Microsoft Sentinel, Microsoft Defender, Azure Monitor, and KQL.

• Experience with containerization and orchestration technologies such as Docker and Kubernetes.

• Hands-on experience with security automation and SOAR solutions, especially Azure Logic Apps.

• Familiarity with CSPM/CNAPP platforms such as Wiz, Palo Alto Prisma/Cortex, or Trend Micro Vision One.

• Good understanding of DevSecOps principles and CI/CD security practices.

• Relevant certifications such as SC-200, Security+, or CSPM/CNAPP certifications are considered a plus.

• Understanding of security threats and risks related to AI/LLM computing environments.