US LBM Cybersecurity Engineer – Azure DevSecOps
RemoteUnited States
EXPIREDUnited StatesRemoteFull TimeEnterprise
Full TimeEnterprise
Job Summary
Implement Microsoft Defender for Cloud (CNAPP) across Azure workloads, manage DevSecOps pipelines using Snyk, and write Infrastructure as Code with embedded security controls. Secure containerized AKS clusters, data platforms like Cosmos DB and Snowflake, and AI-assisted development tools by governing code and secrets exposure. Partner with developers to embed security into the software development lifecycle, conduct threat modeling, and build custom automation for policy enforcement. Ensure alignment with Zero Trust and NIST Cybersecurity Framework principles.
Required Qualifications
- Prior experience as a software engineer, DevOps engineer, or platform engineer
- hands-on coding experience
- Proficiency in at least one modern programming language (Python, C#/.NET, Go, or JavaScript/TypeScript)
- ability to read, write, and debug application code
- Hands-on experience with CI/CD pipelines (Azure DevOps, GitHub Actions, or similar)
- Infrastructure as Code (Terraform, Bicep, or ARM templates)
- Experience integrating or securing cloud-native data platforms — Cosmos DB, MongoDB Atlas, RedPanda, Snowflake, Databricks, or similar managed data and streaming services
- Familiarity with Microsoft Defender for Cloud or comparable CNAPP/CWPP/CSPM tooling
- Experience with Kubernetes/Azure Kubernetes Service (AKS)
- Understanding of the security implications of AI-assisted software development — including AI coding assistants (Cursor, Claude Code) and AI agent/model platforms (Azure AI Foundry)
- Experience with SAST/DAST/SCA tools (Snyk preferred; Checkmarx, Veracode, or similar acceptable)
- Understanding of API design, authentication (OAuth2, service principals, managed identities), and secure service-to-service integration patterns
- Strong understanding of security frameworks such as Zero Trust and the NIST Cybersecurity Framework
- Able to support multiple concurrent workstreams in a highly matrix, fast-paced, multi-site organization experiencing rapid growth
- Must be a self-starter with a builder's mindset
- Travel required to various operating locations along with business-related meetings & conferences
- Physical demands include sitting for extended periods of time, standing and walking, bending or stooping, lifting up to 25 pounds frequently and up to 50 pounds on occasion
- Lifting equipment such as PC CPU's and monitors and transporting to various locations
- Minimum Education required - Bachelor's degree in Computer Science, Software Engineering, Information Systems, or equivalent experience required
- Minimum 3-5 years of professional software development or DevOps engineering experience
- at least 1-2 years focused on security
- Direct experience with Snyk (or equivalent SAST/DAST/SCA)
- Direct experience with Microsoft Defender for Cloud
- Direct experience with at least one cloud-native data platform (Cosmos DB, MongoDB Atlas, RedPanda, Snowflake, or similar)
Desired Qualifications
- Relevant certifications (e.g., AZ-204 Developer Associate, AZ-500, CKA/CKAD, Snyk certifications, Terraform Associate)
- Master's degree preferred
- Experience with Azure Policy
- Experience with Azure Data Factory
- Experience with GitHub Copilot
- Experience with Azure AI Foundry
- Experience with Cursor
- Experience with Claude Code
- Experience with Checkmarx
- Experience with Veracode
- Experience with Terraform Associate certification
- Experience with Snyk certification
- Experience with CKA certification
- Experience with CKAD certification
- Experience with AZ-204 certification
- Experience with AZ-500 certification
Hiring someone like this?
Get your role in front of qualified candidates on Sorce.