Microsoft IAM & Infrastructure Security Engineer - Senior

About the role

We are seeking an experienced Application Security & DevSecOps Engineer to embed security throughout the software development lifecycle and cloud environments. The role focuses on designing, implementing, and automating security controls while enabling development teams to deliver secure applications.

Key responsibilities

• Design, implement, and automate security controls across application development and cloud environments.
• Integrate application security testing (SAST, DAST, IAST) into CI/CD pipelines and support remediation of vulnerabilities.
• Participate in threat modeling, embed security requirements into design, and collaborate with network security on WAF initiatives.
• Support data protection, encryption, and key management across applications and cloud platforms.
• Contribute to security improvement initiatives based on Gartner, Mandiant, and other assessments.

Required profile

• Hands‑on experience with DevSecOps and Secure SDLC (SSDLC) practices.
• Strong knowledge of application security principles, OWASP Top 10, and secure coding.
• Practical experience with SAST, DAST, IAST tools and processes.
• Experience working in AWS cloud environments and integrating security into CI/CD pipelines.

Required skills

• Application Security
• DevSecOps
• Secure SDLC / SSDLC
• SAST, DAST, IAST
• OWASP Top 10
• AWS
• CI/CD pipelines
• Threat Modeling
• Web Application Firewall (WAF)
• Cloud Security
• Data Protection & Encryption
• Secure Coding