Design and implement secure applications and DevSecOps pipelines on Azure. Perform secure coding, code reviews, vulnerability assessments, threat modeling, IAM implementation, monitoring, and mentor junior engineers while collaborating with DevOps and security teams.
Position: Engineer III - DevSecOps (6 to 10 years of experience in Secure Application Development & Azure Security Engineering)
Job Summary:
We are seeking a highly skilled and experienced Security Development Engineer (SecDev Engineer - III) to design, develop, and secure enterprise-grade products and solutions built on Microsoft technologies. This role demands expertise in secure software development, DevSecOps practices, and cloud security, with a strong focus on embedding security into the development lifecycle. You will play a critical role in ensuring secure, scalable, and resilient application development across our platforms.
Key responsibilities:
• Design, develop, and maintain secure applications across cloud and on-prem environments. • Implement secure coding practices and integrate security into the SDLC (DevSecOps). • Perform code reviews, vulnerability assessments, and remediation. • Build and manage secure CI/CD pipelines with integrated security controls. • Design and implement Azure cloud security controls. • Implement identity and access management (Azure AD, RBAC). • Perform threat modelling and risk assessments. • Improve monitoring and threat detection capabilities. • Collaborate with DevOps, InfraOps, and Security teams. • Mentor junior engineers and contribute to documentation. Technology skills, Competencies and Experience: Application & Security Engineering: • .NET / API / web application security experience • Secure coding practices (OWASP Top 10) • Experience with SAST, DAST tools • Strong understanding and Experience in executing a Security Software Development lifecycle • Gathering/Identifying Security and Privacy requirements • Performing Security and Privacy Risk Assessments in support of the development process• Providing guidance on controls and mitigations for reported security issues • Experience protecting sensitive data and vulnerabilities on Cloud resources • Hands-on experience with web application penetration testing • Excellent communication - verbal and written • Leadership qualities including self-accountability, work-prioritization, meeting facilitation, time management, team co-ordination
Cloud & Microsoft Stack: • Azure IaaS and PaaS services • App Services, Functions, Key Vault, Networking,Logic apps
Identity & Access Management: • Azure AD, RBAC, Conditional Access • OAuth and OpenID Connect
DevSecOps & Automation: • Azure DevOps / GitHub Actions / Jenkins • Infrastructure as Code (Terraform, ARM, Bicep)
Monitoring & Threat Detection: • Microsoft Defender, Azure Sentinel (preferred) • Log analysis and alert response
Scripting & Automation: • PowerShell • Python / Bash (preferred)
Qualification: • Bachelor's degree in Computer Science, Information Technology, or a related field.
Experience: • 6 to 10 years of overall IT experience. • 3-5 years in application security, cloud security, or DevSecOps. • Experience in enterprise product or solution development preferred. Nice to have: • Azure security certifications (AZ-500, SC-200, SC-300) • Knowledge of threat modeling frameworks (STRIDE, MITRE) • Experience in API security • Experience in GenAI related solutioning for security review • Integrate AI-enabled security tools into CI/CD pipelines to support continuous security validation
Work location: Wipfli India, Bengaluru
Job Summary:
We are seeking a highly skilled and experienced Security Development Engineer (SecDev Engineer - III) to design, develop, and secure enterprise-grade products and solutions built on Microsoft technologies. This role demands expertise in secure software development, DevSecOps practices, and cloud security, with a strong focus on embedding security into the development lifecycle. You will play a critical role in ensuring secure, scalable, and resilient application development across our platforms.
Key responsibilities:
• Design, develop, and maintain secure applications across cloud and on-prem environments. • Implement secure coding practices and integrate security into the SDLC (DevSecOps). • Perform code reviews, vulnerability assessments, and remediation. • Build and manage secure CI/CD pipelines with integrated security controls. • Design and implement Azure cloud security controls. • Implement identity and access management (Azure AD, RBAC). • Perform threat modelling and risk assessments. • Improve monitoring and threat detection capabilities. • Collaborate with DevOps, InfraOps, and Security teams. • Mentor junior engineers and contribute to documentation. Technology skills, Competencies and Experience: Application & Security Engineering: • .NET / API / web application security experience • Secure coding practices (OWASP Top 10) • Experience with SAST, DAST tools • Strong understanding and Experience in executing a Security Software Development lifecycle • Gathering/Identifying Security and Privacy requirements • Performing Security and Privacy Risk Assessments in support of the development process• Providing guidance on controls and mitigations for reported security issues • Experience protecting sensitive data and vulnerabilities on Cloud resources • Hands-on experience with web application penetration testing • Excellent communication - verbal and written • Leadership qualities including self-accountability, work-prioritization, meeting facilitation, time management, team co-ordination
Cloud & Microsoft Stack: • Azure IaaS and PaaS services • App Services, Functions, Key Vault, Networking,Logic apps
Identity & Access Management: • Azure AD, RBAC, Conditional Access • OAuth and OpenID Connect
DevSecOps & Automation: • Azure DevOps / GitHub Actions / Jenkins • Infrastructure as Code (Terraform, ARM, Bicep)
Monitoring & Threat Detection: • Microsoft Defender, Azure Sentinel (preferred) • Log analysis and alert response
Scripting & Automation: • PowerShell • Python / Bash (preferred)
Qualification: • Bachelor's degree in Computer Science, Information Technology, or a related field.
Experience: • 6 to 10 years of overall IT experience. • 3-5 years in application security, cloud security, or DevSecOps. • Experience in enterprise product or solution development preferred. Nice to have: • Azure security certifications (AZ-500, SC-200, SC-300) • Knowledge of threat modeling frameworks (STRIDE, MITRE) • Experience in API security • Experience in GenAI related solutioning for security review • Integrate AI-enabled security tools into CI/CD pipelines to support continuous security validation
Work location: Wipfli India, Bengaluru
Wipfli Pune, Mahārāshtra, IND Office
Part of 1st Floor, Tower B, Panchshil Business Park Viman Nagar, Pune, India, 411014
Similar Jobs at Wipfli
Cloud • Fintech • Software • Business Intelligence • Consulting • Financial Services
Lead review and finalization of US GAAP accounting work for clients, coach and manage staff, prepare and review complex financial statements, handle multi-entity/intercompany accounting, deferred revenue, KPIs, and ensure quality and documentation.
Top Skills:
Adobe AcrobatBill.ComBusiness CentralExcelIntacctMip AbilaNetSuiteOutlookPowerPointQuickbooks Online (Qbo)Quickbooks Proadvisor (Certification)Word
Cloud • Fintech • Software • Business Intelligence • Consulting • Financial Services
Manage all aspects of audit engagements, ensuring high standards, timely execution, and effective communication with U.S. clients while leading and mentoring team members.
Top Skills:
Adobe AcrobatCasewareIdeaMS OfficeU.S. GaapU.S. Gaas
Cloud • Fintech • Software • Business Intelligence • Consulting • Financial Services
Deliver and maintain sales intelligence reporting and dashboards by extracting, transforming, and validating data from warehouses and CRMs. Support request intake, prioritize analyst tasks, ensure data accuracy, and translate complex data into clear visualizations for sales and cross-functional stakeholders.
Top Skills:
Data WarehouseExcel (Power Query)Power BIPythonSQL
What you need to know about the Pune Tech Scene
Once a far-out concept, AI is now a tangible force reshaping industries and economies worldwide. While its adoption will automate some roles, AI has created more jobs than it has displaced, with an expected 97 million new roles to be created in the coming years. This is especially true in cities like Pune, which is emerging as a hub for companies eager to leverage this technology to develop solutions that simplify and improve lives in sectors such as education, healthcare, finance, e-commerce and more.
