DevSecOps Engineer (Azure)

TL;DR

DevSecOps Engineer (Azure): Strengthening application security and operational security capabilities with an accent on CI/CD integration and vulnerability management. Focus on automating security gates, triaging findings, and optimizing security controls within Azure DevOps pipelines.

Location: Lisbon, Portugal

Company

hirify.global is an employment agency specializing in technical recruitment.

What you will do

• Maintain and enhance security tooling across Azure DevOps CI/CD pipelines (secrets scanning, SCA, SAST, IaC, container scanning, and DAST).
• Triage security findings, coordinate remediation efforts, and report risks to stakeholders.
• Partner with DevOps and Engineering teams to optimize security controls and gates.
• Support vulnerability management across applications, cloud infrastructure, containers, and IaC.
• Assist in incident response, conduct post-incident reviews, and drive continuous security improvement.
• Produce security dashboards, metrics, and executive reporting for governance and audit evidence.

Requirements

• Proven experience in DevSecOps, Security Operations, or Application Security.
• Hands-on experience with Azure DevOps CI/CD pipelines.
• Deep knowledge of SAST, DAST, SCA, IaC, and container security tools.
• Practical experience in vulnerability management.
• Strong knowledge of Azure cloud security.
• Excellent communication and stakeholder management skills.

Nice to have

• Experience in financial services or the insurance industry.
• Relevant security certifications such as CISSP, Security+, AZ-500, SC-200/300, or CSSLP.
• Scripting proficiency in Python or PowerShell.
• Experience with audit and compliance frameworks.