Security Engineer (DevSecOps)
About the role
The Senior Security Engineer (DevSecOps) will be responsible for designing and implementing consistent security logging across a large Azure environment. The role involves defining and deploying logging policies at scale, ensuring security and platform logs are captured and forwarded to Azure Event Hub for SIEM ingestion. Key responsibilities include enforcing security logging standards, deploying Azure Policy definitions, managing log forwarding, supporting SIEM integration, identifying and remediating logging gaps, and collaborating with security and platform teams. The ideal candidate will have strong hands-on experience with Microsoft Azure, Azure Diagnostic Settings, Azure Policy, and infrastructure-as-code tools, as well as excellent troubleshooting and communication skills.
Must have
- Strong hands-on experience with Microsoft Azure in large-scale environments.
- Proven experience implementing Azure Diagnostic Settings at scale.
- Deep knowledge of Azure Policy (custom definitions, initiatives, assignments, remediation).
- Experience forwarding Azure logs to Azure Event Hub.
- Understanding of SIEM ingestion patterns (HEC, Event Hub connectors, log schemas).
- Experience working with Azure Activity Logs, Resource Logs, and Azure AD logs.
- Infrastructure-as-Code experience (ARM, Bicep, or Terraform).
- Strong troubleshooting and stakeholder communication skills.
- DevOps workflow automation
Nice to have
- Experience aligning Azure logging to security frameworks (e.g. ISO 27001, NIST, CIS, Essential Eight).
- Microsoft security certifications (AZ-500, SC-200, SC-300, AZ-400).
- Familiarity with Microsoft Sentinel / Splunk as a reference SIEM.
- Experience designing preventative security controls using Azure Policy.
Technologies
- Azure
- Bicep
- DevOps
- DevSecOps
- Microsoft Entra ID
- Infrastructure as Code
- ISO 27001
- NIST
- Microsoft Sentinel
- SIEM
- Splunk
- Terraform
- Vault
Jobs across Sri Lanka, watched for you.Colombo, Sri Lanka