Cybersecurity Engineer – Azure DevSecOps

🔥 1 minute ago

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

US LBM

WebsiteLinkedInAll Job Openings

10,000+ employees

Founded 2009

📦 Logistics

🏭 Manufacturing

💼 Consulting

💰 Private Equity Round on 2023-10

Logistics • Manufacturing • Consulting

US LBM is one of the largest building products distributors in the United States, operating over 400 locations nationwide. The company provides a wide range of building materials through its local divisions, catering to custom home builders, national builders, and specialty contractors. US LBM combines the advantages of national scale with the service levels, expertise, and entrepreneurial culture of its local brands, distributing specialty building materials for the construction, maintenance, and renovation of homes, businesses, and communities across the country.

📋 Description

• Implement and manage Microsoft Defender for Cloud across Azure workloads, including CSPM and CWPP for virtual machines, AKS containers, and serverless functions • Own the DevSecOps program using Snyk for SAST, DAST, and software composition analysis integrated into CI/CD pipelines • Write and maintain Infrastructure as Code using Terraform, Bicep, and ARM templates with embedded security controls, policy-as-code, and guardrails • Secure integrations between Azure workloads and data platforms including Cosmos DB, MongoDB Atlas, RedPanda, and Snowflake • Secure AKS containerized workloads through cluster hardening, workload identity, network policy, and CI/CD image scanning • Partner with application developers on code reviews, secure coding guidance, and vulnerability remediation • Build and maintain tooling, scripts, and APIs to automate security checks, policy enforcement, and reporting • Conduct threat modeling for cloud-native workloads and data integrations and develop detection and automation use cases • Evaluate and integrate new cloud-native and data platform technologies, including technologies from mergers and acquisitions • Govern security for AI-assisted development tools and AI agent/model platforms, including code and secrets exposure, access scoping, and safe CI/CD integration of AI-generated code • Align DevSecOps and cloud-native practices with Zero Trust and NIST Cybersecurity Framework principles • Potentially design and build internal web applications such as security dashboards, self-service tools, and workflow automation portals

🎯 Requirements

• Prior experience as a software engineer, DevOps engineer, or platform engineer; hands-on coding experience required • Proficiency in at least one of Python, C#/.NET, Go, or JavaScript/TypeScript, including reading, writing, and debugging application code • Hands-on experience with CI/CD pipelines such as Azure DevOps or GitHub Actions • Experience with Infrastructure as Code using Terraform, Bicep, or ARM templates • Experience integrating or securing cloud-native data platforms such as Cosmos DB, MongoDB Atlas, RedPanda, Snowflake, or similar services • Familiarity with Microsoft Defender for Cloud or comparable CNAPP/CWPP/CSPM tooling • Experience with Kubernetes/Azure Kubernetes Service, including container orchestration and cluster security • Understanding of security implications and governance of AI-assisted development and AI agent/model platforms • Experience with SAST/DAST/SCA tools; Snyk preferred, with Checkmarx, Veracode, or similar acceptable • Understanding of API design, OAuth2, service principals, managed identities, and secure service-to-service integration • Strong understanding of Zero Trust and the NIST Cybersecurity Framework • Ability to support multiple concurrent workstreams in a fast-paced, highly matrixed, multi-site organization • Strong interpersonal and communication skills with a collaborative, developer-friendly approach • Self-starter with a builder’s mindset and ability to write tools and automation • Travel required to operating locations, meetings, and conferences • Ability to sit for extended periods, stand and walk, bend or stoop, lift up to 25 pounds frequently and up to 50 pounds occasionally, and transport PC CPUs and monitors • Bachelor’s degree in Computer Science, Software Engineering, Information Systems, or equivalent experience required • Minimum 3–5 years of professional software development or DevOps engineering experience, with at least 1–2 years focused on security • Direct experience with Snyk or equivalent SAST/DAST/SCA, Microsoft Defender for Cloud, and at least one cloud-native data platform required • Relevant certifications preferred, including AZ-204, AZ-500, CKA/CKAD, Snyk certifications, or Terraform Associate

🏖️ Benefits

• Fully remote work arrangement • Travel to various operating locations along with business-related meetings and conferences • Professional development through relevant certification opportunities (certifications preferred) • Equal-opportunity employment