jobapplier

Engineer III - DevSec

Wipfli

Overview Position: Engineer III - DevSecOps (6 to 10 years of experience in Secure Application Development & Azure Security Engineering) Job Summary: We are seeking a highly skilled and experienced Security Development Engineer (SecDev Engineer – III) to design, develop, and secure enterprise-grade products and solutions built on Microsoft technologies. This role demands expertise in secure software development, DevSecOps practices, and cloud security, with a strong focus on embedding security into the development lifecycle. You will play a critical role in ensuring secure, scalable, and resilient application development across our platforms. Key responsibilities:

  • Design, develop, and maintain secure applications across cloud and on-prem environments.
  • Implement secure coding practices and integrate security into the SDLC (DevSecOps).
  • Perform code reviews, vulnerability assessments, and remediation.
  • Build and manage secure CI/CD pipelines with integrated security controls.
  • Design and implement Azure cloud security controls.
  • Implement identity and access management (Azure AD, RBAC).
  • Perform threat modelling and risk assessments.
  • Improve monitoring and threat detection capabilities.
  • Collaborate with DevOps, InfraOps, and Security teams.
  • Mentor junior engineers and contribute to documentation. Technology skills, Competencies and Experience: Application & Security Engineering:
  • .NET / API / web application security experience
  • Secure coding practices (OWASP Top 10)
  • Experience with SAST, DAST tools
  • Strong understanding and Experience in executing a Security Software Development lifecycle
  • Gathering/Identifying Security and Privacy requirements
  • Performing Security and Privacy Risk Assessments in support of the development process• Providing guidance on controls and mitigations for reported security issues
  • Experience protecting sensitive data and vulnerabilities on Cloud resources
  • Hands-on experience with web application penetration testing
  • Excellent communication – verbal and written
  • Leadership qualities including self-accountability, work-prioritization, meeting facilitation, time management, team co-ordination Cloud & Microsoft Stack:
  • Azure IaaS and PaaS services
  • App Services, Functions, Key Vault, Networking,Logic apps Identity & Access Management:
  • Azure AD, RBAC, Conditional Access
  • OAuth and OpenID Connect DevSecOps & Automation:
  • Azure DevOps / GitHub Actions / Jenkins
  • Infrastructure as Code (Terraform, ARM, Bicep) Monitoring & Threat Detection:
  • Microsoft Defender, Azure Sentinel (preferred)
  • Log analysis and alert response Scripting & Automation:
  • PowerShell
  • Python / Bash (preferred) Qualification:
  • Bachelor’s degree in Computer Science, Information Technology, or a related field. Experience:
  • 6 to 10 years of overall IT experience.
  • 3–5 years in application security, cloud security, or DevSecOps.
  • Experience in enterprise product or solution development preferred. Nice to have:
  • Azure security certifications (AZ-500, SC-200, SC-300)
  • Knowledge of threat modeling frameworks (STRIDE, MITRE)
  • Experience in API security
  • Experience in GenAI related solutioning for security review
  • Integrate AI-enabled security tools into CI/CD pipelines to support continuous security validation Work location: Wipfli India, Bengaluru

Every job at Wipfli