Job Title

Security Engineer

Role Summary

We are seeking an experienced Security Engineer to serve as the security authority for a twelve-month DevSecOps transformation engagement. The client setting presents significant security gaps: no SIEM in place, ungoverned Power Platform and Copilot agents, uncontrolled vendor access, inconsistent RBAC enforcement across Azure AD and SailPoint, and an AKS environment with no security baseline.

Your mission is to close these gaps systematically, hardening identity, deploying Microsoft Sentinel, securing pipelines and platforms, and establishing the security operating model that will carry the organization forward.

You will actively leverage Azure-native agentic AI capabilities, including Microsoft Sentinel AI analytics, Azure Policy agents, Entra ID governance automation, and Defender for Cloud to continuously monitor, detect, and remediate security risks at scale throughout the engagement.

Identity & Access Management

- 5+ years in a Security or DevSecOps Engineering role within an Azure environment
- Deep expertise in Azure AD / Entra ID: RBAC design, conditional access, identity protection, and Privileged Identity Management (PIM)
- Hands-on experience with SailPoint IGA: lifecycle workflows, role mining, and policy enforcement
- Experience managing PAT governance, service accounts, and least-privilege enforcement across ADO and GitHub

SIEM & Threat Detection

- Proven experience deploying and operating Microsoft Sentinel: data connectors, analytics rules, workbooks, and playbooks
- Ability to write and tune KQL queries for custom detection rules, dashboards, and alert logic
- Understanding of MITRE ATT&CK; framework and mapping detection coverage to threat categories




- Experience building Logic App / Power Automate incident response playbooks

DevSecOps & Pipeline Security

- Experience reviewing and enforcing security in CI/CD pipelines (ADO YAML and/or GitHub Actions)
- Familiarity with secrets detection tooling (Gitleaks, TruffleHog) and static analysis concepts (SAST, SCA)
- Ability to conduct security reviews of IaC (Terraform) and container configurations
- Experience hardening Azure Kubernetes Service (AKS): RBAC, network policies, and registry controls

Governance & Compliance

- Ability to author security requirements documents, governance frameworks, and risk registers
- Experience integrating security gates and approval workflows into ITSM tools (ServiceNow)
- Familiarity with Microsoft Defender for Cloud and Azure Policy for continuous compliance
- Experience defining DLP policies and connector governance for Power Platform environments

Backup & Resilience

- Experience designing and validating immutable backup (WORM) strategies for code repositories
- Ability to plan and execute recovery drills and document RTO/RPO outcomes

Agentic AI & Automation

- Demonstrated use of Sentinel AI analytics, Defender for Cloud, or Entra governance automation in a production environment
- Ability to evaluate and adopt Azure-native AI security tooling to accelerate detection and reduce manual toil
- Familiarity with GitHub Advanced Security (GHAS) features: secret scanning, dependency review, CodeQL

Preferred Qualifications

- SailPoint Certified Identity Security Engineer
- Azure Security Engineer Associate
- GitHub Advanced Security (GHAS) certification
- Familiarity with AST tooling: Checkmarx, SonarQube, OWASP ZAP, Snyk, or Trivy
- Experience with Zero Trust architecture principles

📌 Security Engineer (Bengaluru)
🏢 USEReady
📍 Bengaluru