DevSecOps Engineer

We're working with an established organisation looking to appoint an experienced DevSecOps Engineer to strengthen its Azure deployment and application security capabilities.

This is a hands-on position combining Azure DevOps, cloud infrastructure and application security. You'll take ownership of CI/CD pipelines, Infrastructure-as-Code and security testing, while helping development teams embed secure practices throughout the software delivery lifecycle.

You'll be responsible for:

• Designing and maintaining CI/CD pipelines within Azure DevOps

• Deploying Azure applications and infrastructure using Terraform

• Supporting Azure services including App Services, AKS, Azure SQL, Storage, Key Vault, VNets, Private Endpoints and Front Door/WAF

• Introducing deployment practices such as blue/green releases, automated rollback and infrastructure drift detection

• Integrating SAST, DAST, dependency and container scanning into development pipelines

• Conducting web application security testing using Burp Suite, OWASP ZAP or similar tools

• Identifying and managing vulnerabilities against OWASP Top 10 and CVSS principles

• Implementing secrets detection, credential rotation and secure Key Vault practices

• Strengthening software supply-chain ...