Senior Application Security / DevSecOps Engineer (Azure)

Senior Application Security / DevSecOps Engineer (Azure)

Location: Greater Houston, TX | Hybrid-Ready

Employment: Long-Term Contract | Potential Contract-to-Hire

Work Authorization: Must be authorized to work in the U.S. without sponsorship now or in the future. No visa sponsorship or transfers.

About the Opportunity

Identify Security is seeking an experienced Application Security / DevSecOps Engineer to help shape, expand, and implement an application security program for a confidential client.

The organization has begun establishing its DevSecOps capabilities and needs a hands-on engineer who can build on that foundation, identify gaps, and drive implementation across multiple development teams.

This role combines Microsoft Azure application security, DevSecOps engineering, automated security testing, and vulnerability remediation .

You'll work directly with developers, cloud infrastructure, and cybersecurity teams to establish practical security processes, integrate controls into development workflows, and drive vulnerabilities through remediation.

This is a build-and-execute role. We're looking for someone who has helped establish or mature an AppSec / DevSecOps program and can personally implement the technical solutions, not simply recommend them.

What You'll Do

• Help shape and mature an emerging Application Security / DevSecOps program , identifying gaps, priorities, and practical improvements.
• Secure and support Microsoft Azure application environments , including resource groups, application configurations, and associated security controls.
• Implement and integrate application security scanning across multiple development teams and CI/CD pipelines.
• Establish automated security checkpoints, testing processes, standards, and supporting documentation.
• Identify, prioritize, track, and validate remediation of vulnerabilities in applications, code, APIs, and third-party libraries.
• Work directly with developers to investigate findings, determine appropriate remediation, and validate fixes.
• Evaluate security tools and existing practices to improve automation, visibility, and developer adoption.
• Serve as the technical bridge between application development, cloud infrastructure, and cybersecurity teams.
• Independently drive assigned initiatives from planning through implementation and ongoing improvement.

Required Experience

• 7+ years of experience across application security, DevSecOps, cloud security, software development, or related disciplines.
• Strong hands-on Microsoft Azure experience , specifically application environments, resource groups, configurations, and associated security controls—not primarily Entra ID / user administration.
• Demonstrated experience helping build, implement, or mature an Application Security / DevSecOps program.
• Experience implementing or integrating application security scanning tools into development workflows and CI/CD pipelines.
• Practical knowledge of SAST, SCA, vulnerability remediation, secure SDLC, and CI/CD security , with familiarity with DAST.
• Experience working directly with software developers to investigate vulnerabilities, implement remediation, and validate closure.
• Understanding of application architecture, APIs, authentication, authorization, and third-party software dependencies.
• Ability to independently own technical initiatives, solve problems, and drive adoption across multiple teams.

Preferred Experience

• Azure DevOps, GitHub Actions, GitLab, Jenkins, or comparable CI/CD platforms.
• Security testing platforms such as Snyk, Checkmarx, Veracode, SonarQube, Mend, or similar.
• Azure Policy, Key Vault, Defender for Cloud, managed identities, or infrastructure as code.
• Secure coding or software development experience with C#, .NET, Python, JavaScript, or TypeScript.
• Experience onboarding multiple development teams into a centralized security scanning platform.
• Experience improving security processes in an organization where DevSecOps capabilities are still developing.

Location & Employment

• Greater Houston, TX candidates preferred.
• Initial engagement is a long-term contract with remote work flexibility.
• Candidates must be willing and able to work a hybrid schedule in Greater Houston (approximately two days onsite per week) if converted to permanent employment.
• Permanent conversion is a potential future opportunity, subject to business and headcount approval, and is not guaranteed.
• Candidates must be authorized to work in the United States without requiring employer sponsorship now or in the future. Visa sponsorship and transfers are not available.

What Makes Someone Successful Here?

You've worked in an environment where application security wasn't fully established. You helped identify what was missing, implemented scanning and security controls, worked with developers to improve their processes, and made the program more effective.

You understand both the technical work and the challenges of getting development teams to adopt security practices.

You're a hands-on engineer who can help shape the direction, implement the solutions, and take ownership of the results.