Security Consulting Engineer

About the role

We are seeking a driven Security Consulting Engineer to own the security posture of our SaaS platforms, Azure cloud infrastructure, and software delivery pipelines. You will embed security across Azure workloads, CI/CD pipelines, Zoho applications and third‑party SaaS integrations, working closely with DevOps, IT and Engineering teams.

Key responsibilities

• Maintain and monitor Azure security controls (VNets, NSGs, Private Endpoints, Azure Firewall, DDoS, WAF) and conduct risk assessments using Microsoft Defender for Cloud.
• Perform application security reviews, threat modeling and secure design reviews for web apps, APIs and microservices.
• Integrate SAST, DAST, SCA and secrets detection into CI/CD pipelines and manage container security for Azure Container Apps.
• Configure and govern Zoho One security settings, manage user access, MFA, IP restrictions and audit logs.
• Operate a SIEM platform, lead incident response for cloud, pipeline and SaaS events, and maintain security policies and compliance documentation.

Required profile

• 8+ years of hands‑on experience in cloud security, application security or information security.
• Proven track record securing production environments on Azure and other cloud providers.
• Experience performing manual and tool‑assisted application security assessments.
• Hands‑on experience integrating security tools into CI/CD pipelines and administering Zoho or similar SaaS platforms.

Required skills

• Azure security services (Defender for Cloud, Azure Firewall, Front Door, Key Vault).
• Application security tools and frameworks (OWASP Top 10, Burp Suite, API security testing).
• DevSecOps tooling (GitHub Actions, Jenkins, GitLab CI, SonarQube, Snyk, Trivy, Checkov).
• Container security (Docker image scanning, Azure Container Apps).
• SIEM and monitoring (Microsoft Sentinel or equivalent).
• Scripting/automation (Python, Bash, PowerShell, Terraform).
• Security frameworks (NIST, CIS Benchmarks, Zero Trust, ISO 27001, SOC 2, GDPR, HIPAA, PCI‑DSS).
• Zoho One administration and security configuration.