Security Engineer (DevSecOps)

Position Description

Role Title: Senior Security Engineer (DevSecOps)

Role Purpose

We are seeking an experienced DevSecOps Engineer with deep expertise in Azure logging, diagnostic settings, and policy-as-code to design and implement consistent security logging across a large Azure environment.

This role will focus on defining and deploying logging policies at scale (management group and resource group level) to ensure security and platform logs are captured and forwarded to Azure Event Hub , enabling downstream ingestion into SIEM .

Key Responsibilities

• Define and enforce security logging standards across Azure subscriptions, management groups, and resource groups.
• Design and deploy Azure Policy definitions and initiatives to mandate Diagnostic Settings on Azure resources.
• Ensure capture of security-relevant telemetry , including:
• Azure Activity Logs
• Resource Diagnostic Logs
• Azure AD / Entra ID audit and sign-in logs
• Network, Key Vault, Storage, and PaaS service logs
• Implement and manage log forwarding via Azure Event Hub , ensuring secure, scalable, and resilient delivery.
• Support integration of Azure logs into SIEM , ensuring log completeness, consistency, and integrity.
• Identify and remediate logging gaps, policy drift, and non-compliant resources .
• Partner with SOC, security architecture, and platform teams to support threat detection, incident response, and compliance obligations .
• Develop clear documentation covering logging architecture, policy intent, and operational procedures.

Required Skills & Experience

• Strong hands-on experience with Microsoft Azure in large-scale environments.
• Proven experience implementing Azure Diagnostic Settings at scale.
• Deep knowledge of Azure Policy (custom definitions, initiatives, assignments, remediation).
• Experience forwarding Azure logs to Azure Event Hub .
• Understanding of SIEM ingestion patterns (HEC, Event Hub connectors, log schemas).
• Experience working with Azure Activity Logs, Resource Logs, and Azure AD logs .
• Infrastructure-as-Code experience (ARM, Bicep, or Terraform).
• Strong troubleshooting and stakeholder communication skills.
• DevOps workflow automation

Desirable / Nice to Have

• Experience aligning Azure logging to security frameworks (e.g. ISO 27001, NIST, CIS, Essential Eight).
• Microsoft security certifications (AZ-500, SC-200, SC-300, AZ-400).
• Familiarity with Microsoft Sentinel / Splunk as a reference SIEM.
• Experience designing preventative security controls using Azure Policy.

What Success Looks Like

• Consistent, enforced logging across all Azure subscriptions and resource groups.
• Clear policy-driven assurance that new resources cannot be deployed without logging.
• Reliable and scalable log delivery into Event Hub and onward to SIEM.
• Reduced manual effort and improved auditability of security logging.