28 sep
|
Ingepsy
|
Medellín
Founded in 2007, Growth Acceleration Partners (GAP) is a consulting and technology services company. We consult, design, build and modernize revenue-generating software and data engineering solutions for clients. With modernization services and AI tools, we help businesses achieve a competitive advantage through technology. GAP’s remote, integrated engineering teams use end-to-end solutions to innovate and align with your business goals. We have 600+ English-speaking engineers based in Latin America and approximately 20 U.S.-based engineers. With some of the highest customer satisfaction scores in the industry, GAP’s focus is customer and employee success.GAP is a woman-owned company headquartered in Austin Texas. We are a values-based company focused on growing our people by investing in education, onsite English classes and training in the latest technologies, including AI, data analytics and machine learning. Our goal is to provide solutions for our customers that help them achieve critical business outcomes, while enabling our GAPSters and our communities to attain long-term success.SummaryWe are looking for a Senior Azure DevSecOps Engineer to lead the design, implementation, and automation of security controls across our Microsoft Azure cloud ecosystem and CI/CD pipelines. In this high-impact role, you will embed security into every phase of the Software Development Lifecycle (SDLC), partnering closely with DevOps, engineering, and product teams to safeguard cloud infrastructure, applications, and APIs. You will combine deep cloud security expertise with modern AI-driven security tools, threat modeling, and automated DevSecOps workflows to proactively defend against evolving threats and ensure continuous platform compliance.EducationBachelor’s Degree in Computer Science, Cybersecurity, Information Technology, Software Engineering, or a related technical field.Professional Experience7+ years of professional experience in Cloud Security, Application Security, DevSecOps, or Information Security with a strong focus on Microsoft AzureHands-on experience architecting and managing security controls within Azure (Azure AD / Entra ID, Defender for Cloud, Key Vault,
Application Gateways)Proven track record embedding automated security checks into CI/CD pipelines (Azure DevOps, GitHub Actions, Jenkins) using SAST, DAST, IAST, and dependency scanningDemonstrated expertise in threat modeling, vulnerability management, penetration testing, and container/Kubernetes (AKS) securityExperience using scripting languages (Python, PowerShell, or Bash) to build security automation and log analysis workflowsPractical experience integrating AI-assisted developer tools (e.G., GitHub Copilot) or AI-powered threat detection and remediation into software delivery practicesKey ResponsibilitiesArchitect, implement, and maintain enterprise security controls across Azure environments, encompassing IAM, network security, container security, and workload protectionEmbed secure SDLC practices into automated CI/CD pipelines, integrating SAST/DAST/IAST tools, dependency scanning, and OWASP Top 10 compliance checksLead threat modeling assessments, evaluate cloud architecture risks, and design mitigation strategies for microservices, containers, and serverless applicationsDeploy and manage Web Application Firewalls (WAF), API Gateways, and centralized secrets management solutionsMonitor cloud security events using SIEM, CSPM, and CWPP platforms, assisting in threat hunting and incident response proceduresDevelop and maintain cloud reference architectures, security policies, and automated compliance guardrailsLeverage AI productivity tools and security scripting (Python, PowerShell, Bash) to automate repetitive security workflows, log analysis, and triageCollaborate cross-functionally with engineering teams to mentor developers on secure coding standards and proactive risk reductionRequired Technical SkillsStrong experience in several of the following areas:Cloud & Azure Security:
Deep technical proficiency with Microsoft Azure, Azure AD / Entra ID, Defender for Cloud, Azure Key Vault, Network Security Groups, and Application GatewaysDevSecOps & CI/CD Pipelines: Experience integrating automated security testing into Azure DevOps, GitHub Actions, or Jenkins pipelinesApplication Security & Tooling: Secure SDLC methodologies, OWASP Top 10, SAST/DAST/IAST tools, dependency scanning, and container/Kubernetes (AKS) securityWAF & API Protection: Hands-on experience with Web Application Firewalls (e.G., Cloudflare, F5, Akamai), API Gateways, and secrets managementScripting & IaC: Proficient in Python, PowerShell, or Bash for automation, alongside Infrastructure as Code (Terraform or Bicep)AI Security Integration: Familiarity with AI-driven security automation, AI code assistants (GitHub Copilot, Cursor), or AI-powered log analysis toolsNice to HaveIndustry security certifications (e.G., CySA+, Azure Security Engineer Associate AZ-500, CISSP, or CCSP)Hands-on experience with Cloud Security Posture Management (CSPM) platforms, SIEM tools, serverless security, and ITSM platforms (e.G., ServiceNow)Exposure to securing AI/ML workloads, vector databases, or LLM API endpoints in Azure cloud environmentsSoft SkillsAdvanced English proficiency (written and verbal)Exceptional analytical, diagnostic, and risk-assessment capabilitiesStrong consultative and communication skills to influence secure design decisions across engineering and business teamsProactive mindset with high technical autonomy, accountability, and eagerness to stay ahead of emerging cybersecurity threatsAt Growth Acceleration Partners, we're an equal opportunity employer committed to building a diverse and inclusive team. We value everyone's unique background, and we provide equal opportunities regardless of race, color, creed, religion, sexual orientation, gender identity, age, national origin, disability, marital status, veteran status or any other personal right protected by law. We foster a culture of belonging and strive to provide a welcoming environment where everyone feels safe to contribute and grow.#J-18808-Ljbffr
📌 Senior Azure Devops Engineer (Medellín)
🏢 Ingepsy
📍 Medellín