SECURITY ENGINEER | DEVSECOPS | AGENTIC AI

WE ARE HIRING – SECURITY ENGINEER | DEVSECOPS | AGENTIC AI
🔹 Role: Security Engineer – DevSecOps | Agentic AI
🔹 Experience: 5+ Years
🔹 Work Mode: Remote
PROJECT DURATION: 6+ MONTHS – MANDATORY
PLEASE APPLY ONLY IF YOU ARE COMFORTABLE AND INTERESTED IN A 6+ MONTHS ENGAGEMENT.
MANDATORY SKILLS:
✅ Azure Security / Azure DevSecOps
✅ Microsoft Entra ID – RBAC, Conditional Access, Identity Protection, PIM
✅ SailPoint IGA – lifecycle workflows, role mining & access governance
✅ Microsoft Sentinel – SIEM, KQL, analytics rules, playbooks & dashboards
✅ Azure DevOps & GitHub Security – YAML pipelines, GitHub Actions, PAT governance
✅ CI/CD Security – SAST, SCA, secrets scanning
✅ AKS Security – RBAC, network policies & container security
✅ Microsoft Defender for Cloud & Azure Policy
✅ Terraform / IaC Security
✅ Security Automation – Logic Apps / Power Automate
✅ GitHub Advanced Security (GHAS) – Secret Scanning, CodeQL & Dependency Review
✅ AI / Security Automation – Azure-native AI/automation capabilities
📌 JOB SUMMARY:
We are looking for an experienced Security Engineer – DevSecOps with strong hands-on expertise in Azure Security, Identity & Access Management, SIEM, CI/CD Security, Cloud Governance and Security Automation.
The candidate will act as the security authority for a DevSecOps transformation engagement, focusing on strengthening identity and access controls, implementing Microsoft Sentinel, securing CI/CD pipelines and AKS, establishing governance controls, and improving security monitoring and incident response.
The role also involves leveraging Azure-native AI and automation capabilities to automate security detection, governance, compliance and remediation activities.
KEY RESPONSIBILITIES:
Identity & Access Management
Design and implement Microsoft Entra ID RBAC, Conditional Access, Identity Protection and PIM.
Manage SailPoint IGA lifecycle workflows, role mining and policy enforcement.
Implement least-privilege access across Azure DevOps and GitHub.
Govern PATs, service accounts and privileged identities.
SIEM & Threat Detection
Deploy and operate Microsoft Sentinel.
Configure data connectors, analytics rules, workbooks and playbooks.
Develop and tune KQL queries for custom detections and dashboards.
Map security detections to MITRE ATT&CK.
Develop incident-response automation using Logic Apps / Power Automate.
DevSecOps & Pipeline Security
Review and enforce security controls across Azure DevOps YAML and GitHub Actions pipelines.
Implement secrets detection using Gitleaks / TruffleHog or similar tools.
Apply SAST, SCA and application security practices.
Perform security reviews of Terraform/IaC and container configurations.
Secure AKS, including RBAC, network policies and container registry controls.
Governance & Compliance
Develop security requirements, governance frameworks, policies and risk registers.
Implement security gates and approval workflows through ServiceNow.
Use Microsoft Defender for Cloud and Azure Policy for continuous compliance.
Define DLP policies and connector governance for Microsoft Power Platform.
Agentic AI & Security Automation
Apply Azure-native AI and automation capabilities for security monitoring and governance.
Leverage Sentinel AI analytics, Defender for Cloud and Entra governance automation where applicable.
Identify opportunities to automate detection, remediation and security operations.
Work with GitHub Advanced Security (GHAS), including Secret Scanning, Dependency Review and CodeQL.
REQUIRED EXPERIENCE:
5+ years of experience in Security Engineering or DevSecOps Engineering.
Strong hands-on experience in an Azure environment.
Experience implementing security controls in enterprise environments.
Production experience with security monitoring, detection, governance and automation.
Strong understanding of Zero Trust security principles.
Knowledge of Zero Trust Architecture
PLEASE APPLY ONLY IF YOU ARE COMFORTABLE WITH THE 6+ MONTHS PROJECT DURATION.
#Hiring #SecurityEngineer #DevSecOps #AzureSecurity #CyberSecurity #MicrosoftSentinel #EntraID #SailPoint #AzureDevOps #GitHub #GHAS #AKS #CloudSecurity #IAM #SIEM #AgenticAI #SecurityAutomation #RemoteJobs
Interested candidates please share your resume at
shruthim@qusonic.com

Work arrangement
No