Are you the right applicant for this opportunity Find out by reading through the role overview below.
DevSecOps Engineer - Azure / Application Security
We're working with an established organisation looking to appoint an experienced DevSecOps Engineer to strengthen its Azure deployment and application security capabilities.
This is a hands-on position combining Azure DevOps, cloud infrastructure and application security. You'll take ownership of CI/CD pipelines, Infrastructure-as-Code and security testing, while helping development teams embed secure practices throughout the software delivery lifecycle.
The Role
You'll be responsible for:
- Designing and maintaining CI/CD pipelines within Azure DevOps
- Deploying Azure applications and infrastructure using Terraform
- Supporting Azure services including App Services, AKS, Azure SQL, Storage, Key Vault, VNets, Private Endpoints and Front Door/WAF
- Introducing deployment practices such as blue/green releases, automated rollback and infrastructure drift detection
- Integrating SAST, DAST, dependency and container scanning into development pipelines
- Conducting web application security testing using Burp Suite, OWASP ZAP or similar tools
- Identifying and managing vulnerabilities against OWASP Top 10 and CVSS principles
- Implementing secrets detection, credential rotation and secure Key Vault practices
- Strengthening software supply-chain security through SBOM generation, dependency scanning and artefact signing
- Supporting API security testing, threat modelling and third-party penetration tests
- Configuring Azure-native security tooling, including Defender for Cloud, Azure Policy, Sentinel and Azure Monitor
- Enforcing identity and access controls across Entra xgikmsk ID, RBAC, Conditional Access and PIM
- Supporting compliance with frameworks such as Cyber Essentials Plus, ISO 27001 and GDPR
- Mentoring junior engineers and helping developers adopt secure coding and deployment practices
What We're Looking For
You'll need:
- Around three to five years' experience across DevOps, platform engineering or application security
- Strong hands-on experience with Microsoft Azure and Azure DevOps
- Proven experience securing web applications in a production environment
DevSecOps Engineer in Westcott employer: Oscar Associates Limited
Join a dynamic and innovative team as an IP Services Engineer, where you will thrive in a collaborative work culture that values technical expertise and problem-solving skills. Our company offers competitive benefits, including professional development opportunities and a commitment to employee growth, all within a large enterprise technology environment that prioritises service reliability and performance. Located in a vibrant area, we provide a stimulating workplace that encourages creativity and teamwork, making it an excellent choice for those seeking meaningful and rewarding employment.
