SecOps Engineer

About the role

A detail-oriented and proactive SecOps Engineer is sought to join the security team and support and enhance the organization's security operations and engineering capabilities. The role focuses on implementing, maintaining and optimizing security frameworks, controls and tools to protect the company's infrastructure, applications and data assets.

Key responsibilities

• Implement and maintain security frameworks for building and deploying applications, including third-party risk assessments, access management and periodic access reviews enforcing least privilege.
• Conduct API and API key security assessments, GDPR DPIA and security compliance assessments, permission management and attack surface assessments.
• Review and approve change requests (network ports, DNS) against defined protocols to ensure a secure public DNS footprint.
• Monitor Web Application Firewalls, SOC integrations and Microsoft Defender for Cloud, and follow up on alerts and recommendations.
• Test login portals for strong authentication (MFA, password policies, account lockout, session management) and work with developers to close gaps.
• Enforce secrets management via Key Vault (Azure Key Vault) for keys, certificates and credentials.
• Prepare security reports, trackers, access review records and documentation in Microsoft Office (Excel, Word, PowerPoint).
• Collaborate with internal teams so security controls are integrated into infrastructure and applications.

Required profile

• Bachelor's degree in Computer Science, Information Security or a related field.
• 3-4 years of hands-on experience in information security operations or engineering.
• Familiarity with DevSecOps, SAST, application security, API security and cloud operations.
• Familiarity with VAPT, GDPR and hands-on Azure cloud operations.
• Knowledge of ISO 27001, NIST, OWASP and PCI DSS; understanding of MFA, SSO, OAuth/OIDC and OWASP Top 10.
• Strong analytical and problem-solving skills with attention to detail.

Required skills

• Hands-on cloud security tooling, preferably Microsoft Defender for Cloud and the Azure ecosystem.
• Access control, DNS/network configuration and application security principles.
• ITSM platforms (Freshworks, Jira Service Management) and WAF/SOC tools.
• Proficiency in Microsoft Office, especially Excel (pivot tables) and Word.