15 hours ago
London, United KingdomSenior
Responsibilities
- Design, build, and maintain secure CI/CD pipelines in Azure DevOps for deploying Azure resources.
- Secure Azure DevOps repositories and pipelines and enforce quality gates and deployment best practices.
- Integrate SAST, SCA, DAST, and container security scanning into CI/CD pipelines.
- Identify, classify, evaluate, and drive remediation of vulnerabilities.
- Identify security gaps across infrastructure, networks, and applications and improve the overall security posture.
- Design security solutions aligned with Zero Trust principles, including CASB, SIEM, SOAR, IAM, PAM, Azure Active Directory, and SSO.
- Implement and manage Azure-native security and monitoring tools to detect and alert on threats.
- Implement Azure Policy and Azure Monitor for security governance, compliance, and regulatory alignment.
Requirements
- Mandatory hands-on experience with Azure Sentinel (SIEM).
- Hands-on engineering or architecture experience with on-premises or public cloud technologies, specifically Microsoft Azure.
- Strong knowledge of Azure security services and best practices, including Azure Container Registry, Azure Defender, Azure Policy, and Azure Monitoring and alerts.
- Strong understanding of DevOps and GitOps concepts and experience with Azure DevOps Repos, Pipelines, and their security.
- Hands-on experience integrating SAST, SCA, and DAST security scanning tools into CI/CD pipelines.
- Extensive experience implementing security across the SDLC, including container security.
- Knowledge of vulnerability identification, classification, risk evaluation, and remediation.
- Broad security experience across infrastructure, network, and application security.
- Understanding of regulatory requirements, risk management, and security controls.
- Ability to design and propose security solutions and architectures.
- Familiarity with Checkov, GitHub Advanced Security, SonarQube, Burp Suite, or similar security and compliance scanning tools is preferred.
Benefits
- Full-time employment.
- Hybrid work arrangement in London.
About Cognizant
Cognizant is a public IT services and consulting firm that designs, builds, and runs enterprise technology, including digital engineering, cloud modernization, data/AI, and managed services. It sells consulting, systems integration, and outsourcing on multi-year engagements to large enterprises in healthcare, banking, retail, communications, and manufacturing. Founded in 1994 and headquartered in Teaneck, New Jersey, Cognizant is NASDAQ-listed (CTSH) and a Fortune 500 company.