Drop Table
Azure DevSecOps Engineer
How your CV stacks up
Upload your CV to see how well it fits this job role
?%
We're looking for an Azure DevSecOps Engineer who enjoys solving problems rather than simply identifying them.
You'll work alongside Platform Engineers, DevOps Engineers, Infrastructure teams and Security stakeholders to translate security findings into practical engineering work. Whether it's improving Defender recommendations, hardening Azure services, strengthening identity controls or implementing compliance capabilities through Purview, your focus will be on reducing real-world risk through hands-on delivery.
Strong technical capability is essential, but so is the ability to communicate clearly with both technical and non-technical stakeholders. We value engineers who can explain why something matters, build consensus, and work collaboratively to drive remediation through to completion.
This isn't a role for someone who produces reports and walks away. We want someone who enjoys fixing the underlying problem and leaving the environment in a better state than they found it.
Key Responsibilities
Azure Security Engineering & Cloud Remediation
- Deliver hands-on remediation of Azure security findings, taking issues from investigation through to resolution.
- Improve the security posture of Azure environments by addressing misconfigurations, identity risks and infrastructure weaknesses.
- Secure Azure services including networking, storage, compute, platform services and Kubernetes workloads.
- Implement preventative guardrails using Azure Policy, Infrastructure-as-Code and automation to reduce repeat findings.
- Partner with Platform and DevOps teams to embed security into delivery pipelines rather than bolting it on afterwards.
- Translate technical security findings into clear engineering tasks and see them through to completion.
Reasons to use Rodeo
Start with a chat, not a search bar
Grad scheme, placement, apprenticeship? Not sure what you want yet — that's fine. Your agent talks it through with you and turns "I have no idea" into a shortlist.
It searches the market for you
Every day your agent scans the market matching roles against what actually matters to you, not just keywords on a CV.
Only hits
No noise. No "maybe this fits." Just roles with a clear explanation of why they're right — and where to focus when applying.
Microsoft Defender Security
- Improve and maintain Microsoft Defender for Cloud, Defender for Endpoint and Defender EASM.
- Reduce vulnerabilities through configuration hardening, endpoint protection and continuous remediation.
- Drive measurable improvements in Secure Score through practical engineering rather than tactical fixes.
- Work alongside Security Operations to investigate, prioritise and resolve security findings.
Data Protection & Compliance
- Implement and enhance Microsoft Purview capabilities including DLP, Sensitivity Labels, Insider Risk and Information Protection.
- Support compliance initiatives across standards such as ISO 27001, SOC 2, GDPR and NIS2.
- Produce and maintain security documentation, implementation guidance and audit evidence where required.
Platform Hardening
- Deliver improvements across Azure identity, networking, endpoints and workloads.
- Implement and enhance Conditional Access, Privileged Identity Management (PIM), Key Vault and encryption controls.
- Work with engineering teams to reduce technical debt and improve security by default.
Detection & Continuous Improvement
- Support Microsoft Sentinel through analytics tuning, automation and alert optimisation.
- Assist with incident investigation and remediation where required.
- Produce meaningful reporting that demonstrates measurable improvements in security posture over time.
Collaboration & Consultancy
- Build strong working relationships with Engineering, Infrastructure, Security and Product teams.
- Explain technical risk in a way that enables informed decisions rather than creating unnecessary barriers.
- Provide pragmatic guidance that balances security, operational requirements and delivery timelines.
- Contribute to a collaborative engineering culture where security is viewed as an enabler, not an obstacle.
- Continuously improve remediation processes, documentation and automation to make future delivery faster and more consistent.
Get help with your application
Your very own career expert that helps elevate your application to the next level.
Skills & Experience
Essential
- Strong hands-on Azure security engineering experience.
- Experience with Microsoft Defender for Cloud, Defender for Endpoint and Defender EASM.
- Experience implementing Microsoft Purview capabilities including DLP and Information Protection.
- Strong understanding of Azure networking, identity and cloud architecture.
- Experience remediating vulnerabilities rather than simply identifying them.
- Azure identity expertise including Entra ID, Conditional Access and Privileged Identity Management.
- PowerShell and/or Microsoft Graph automation.
- Excellent communication and stakeholder management skills, with the ability to work effectively across engineering, infrastructure and security teams.
- A consultative approach with the confidence to challenge constructively and influence technical decisions.
Desirable
- Microsoft Sentinel administration and detection engineering.
- Experience implementing Zero Trust principles.
- Experience working within regulated or compliance-driven environments.
- Knowledge of Infrastructure-as-Code (Terraform, Bicep or ARM).
- Azure Policy and automated governance experience.
“It took my CV and asked me questions relevant to understanding what kind of jobs to suggest for me. Suggestions were almost perfect. Jobs were exactly what I’ve been looking for.”
Jessica, London
Skills
Location