Overview

Position: Engineer III - DevSecOps

(6 to 10 years of experience in Secure Application Development & Azure

Security Engineering)

Job Summary

We are seeking a highly skilled and experienced Security Development Engineer

(SecDev Engineer – III) to design, develop, and secure enterprise-grade products and solutions built on Microsoft technologies. This role demands expertise in secure software development, DevSecOps practices, and cloud security, with a robust focus on embedding security into the development lifecycle. You will play a critical role in ensuring secure, scalable, and resilient application development across our platforms.

Key responsibilities

- Design, develop, and maintain secure applications across cloud and on-prem environments.
- Implement secure coding practices and integrate security into the SDLC

(DevSecOps).

- Perform code reviews, vulnerability assessments, and remediation.
- Build and manage secure CI/CD pipelines with integrated security controls.
- Design and implement Azure cloud security controls.
- Implement identity and access management (Azure AD, RBAC).
- Perform threat modelling and risk assessments.
- Improve monitoring and threat detection capabilities.
- Collaborate with DevOps, InfraOps, and Security teams.
- Mentor junior engineers and contribute to documentation.

Technology skills, Competencies and Experience:

Application & Security Engineering:

- .NET / API / web application security experience
- Secure coding practices (OWASP Top 10)
- Experience with SAST, DAST tools
- Strong understanding and Experience in executing a Security Software

Development lifecycle

- Gathering/Identifying Security and Privacy requirements




- Performing Security and Privacy Risk Assessments in support of the development process
- Providing guidance on controls and mitigations for reported security issues
- Experience protecting sensitive data and vulnerabilities on Cloud resources
- Hands-on experience with web application penetration testing
- Excellent communication – verbal and written
- Leadership qualities including self-accountability, work-prioritization,

meeting facilitation, time management, team co-ordination

Cloud & Microsoft Stack:

- Azure IaaS and PaaS services
- App Services, Functions, Key Vault, Networking,Logic apps

Identity & Access Management:

- Azure AD, RBAC, Conditional Access
- OAuth and OpenID Connect

DevSecOps & Automation:

- Azure DevOps / GitHub Actions / Jenkins
- Infrastructure as Code (Terraform, ARM, Bicep)

Monitoring & Threat Detection:

- Microsoft Defender, Azure Sentinel (preferred)
- Log analysis and alert response

Scripting & Automation:

- PowerShell
- Python / Bash (preferred)

Qualification

- Bachelor’s degree in Computer Science, Information Technology, or a related field.

Experience

- 6 to 10 years of overall IT experience.
- 3–5 years in application security, cloud security, or DevSecOps.
- Experience in enterprise product or solution development preferred.

Nice to have

- Azure security certifications (AZ-500, SC-200, SC-300)
- Knowledge of threat modeling frameworks (STRIDE, MITRE)
- Experience in API security
- Experience in GenAI related solutioning for security review
- Integrate AI-enabled security tools into CI/CD pipelines to support continuous security validation

Work location: Wipfli India, Bengaluru

📌 Engineer III - DevSec (Bengaluru)
🏢 Wipfli
📍 Bengaluru