We’re Hiring: Security Engineer (DevSecOps | Azure)

Location: Bangalore Whitefield

Employment Type: Full time

Experience: 3–6 Years

About the Role

We’re looking for a Security Engineer to be the security lead on a large DevSecOps transformation in an Azure-centric enterprise. You’ll strengthen identity and access controls, set up threat detection and response, secure CI/CD pipelines and cloud platforms, and help build a security operating model that lasts.

You’ll also use Azure’s built-in AI security tools, including Microsoft Sentinel AI analytics, Defender for Cloud, Azure Policy and Entra ID governance automation, to find and fix security risks at scale.

What You’ll Do

- Design and enforce RBAC, conditional access, PIM and least-privilege controls across Entra ID (Azure AD) and SailPoint
- Deploy and run Microsoft Sentinel, including data connectors, analytics rules, workbooks and automated playbooks
- Write and tune KQL queries for custom detections, dashboards and alert logic, mapped to MITRE ATT&CK;
- Build incident response automation using Logic Apps and Power Automate
- Add security controls to CI/CD pipelines (Azure DevOps YAML and GitHub Actions)
- Review Terraform (IaC) and container configurations, and harden AKS environments
- Govern PATs, service accounts and access across Azure DevOps and GitHub
- Define DLP and connector governance for Power Platform and Copilot environments
- Add security gates and approval workflows to ServiceNow
- Design immutable (WORM) backup strategies,



run recovery drills and document RTO/RPO
- Write security requirements, governance frameworks and risk registers

What We’re Looking For

- 3–6 years of experience in Security or DevSecOps Engineering, ideally in Azure environments
- Strong hands-on experience with Azure AD / Entra ID (RBAC, Conditional Access, Identity Protection, PIM)
- Hands-on experience with SailPoint IGA (lifecycle workflows, role mining, policy enforcement)
- Proven experience with Microsoft Sentinel and KQL
- Familiarity with secrets detection tools (Gitleaks, TruffleHog) and SAST/SCA concepts
- Experience with Microsoft Defender for Cloud and Azure Policy for continuous compliance
- Familiarity with GitHub Advanced Security (secret scanning, dependency review, CodeQL)
- Experience using AI-driven security tools to speed up detection and cut manual work

Nice to Have

- SailPoint Certified Identity Security Engineer
- Microsoft Certified: Azure Security Engineer Associate (AZ-500)
- GitHub Advanced Security certification
- Experience with Checkmarx, SonarQube, OWASP ZAP, Snyk or Trivy
- Knowledge of Zero Trust architecture principles

Why Join Us

- Work on a high-impact, enterprise-scale security transformation
- Hands-on experience with the latest Azure-native AI security tools
- A collaborative team that values your growth

- ? Interested? Apply directly or send your resume to Email: [email protected]

Phone Number: +91 91089 83528

Feel free to tag or share with someone who’d be a great fit!

📌 Security Engineer (Bengaluru)
🏢 DigiFortex
📍 Bengaluru