Security Engineer

Local to MI only. NO C2C.

Application Security Operations

• Manage and oversee the operational use of application security tools such as DAST, SAST, and SCA.

• Collaborate with Development and DevOps teams to integrate security testing into CI/CD pipelines.

• Ensure vulnerabilities identified through security scans are properly triaged and remediated.

• Guide development teams on interpreting scan results and prioritizing vulnerability remediation.

• Support container security by ensuring base images are regularly updated.

Cloud Security

• Hands-on experience securing Microsoft Azure environments including:

  • Microsoft Defender for Cloud

  • Entra ID

  • Azure Sentinel (SIEM/SOAR)

• Assess and strengthen Azure environments across IaaS and PaaS platforms.

• Review and enhance network security configurations.

• Define and enforce Infrastructure-as-Code security policies using tools such as Terraform, ARM Templates, or Bicep.

Infrastructure Vulnerability Management

• Conduct proactive vulnerability assessments using Microsoft Defender for Cloud.

• Maintain continuous security posture management across cloud and hybrid environments.

• Identify configuration issues and security gaps and coordinate remediation with relevant teams.

• Implement security controls and patches recommended through Defender for Cloud.

Key Responsibilities

• Support initiatives related to:

  • Vulnerability Assessment

  • Threat Intelligence

  • Application Security

  • Secure Cloud Configuration

  • Identity & Access Management

• Manage and maintain security tools and software.

• Work closely with developers on application security best practices.

• Own and manage the security ticketing system.

• Assist the security team with other technical security initiatives.

Minimum Qualifications

• 5 8 years of experience in Application Security and/or Infrastructure Security.

• Experience working with ISO security frameworks or relevant certifications.

Preferred Certifications

• CISSP

• CISM

• AZ-500 (Microsoft Certified: Azure Security Engineer Associate)

• CySA+

• CEH