> Markdown version of [/jobs/ext/1507442-security-engineer](https://www.wearedevelopers.com/jobs/ext/1507442-security-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Security Engineer - **Company:** Armada LTD - **Location:** Seattle, WA, United States - **Experience:** Experienced - **Salary:** $130,824.0 - $163,530.0 - **Contract:** Permanent contract - **Skills:** Training Data, Application Programming Interfaces (APIs), Artificial Intelligence, Application Layers, Business Logic, Software System Penetration Testing, Microsoft Azure, Cloud Computing, Cloud Computing Security, Cyber Security, Continuous Integration, Intrusion Detection and Prevention, Python (Programming Language), Network Security, Log Analysis, Open Web Application Security, Kusto Query Language, Secure Coding, Security Information and Event Management, SQL Databases, Software Vulnerability Management, Web Applications, Policy as Code, Large Language Models, Mitre Att&ck, GWAPT, Containerization, Kubernetes, Information Technology, Bicep, Nessus, Microsoft Sentinel, Nexpose, Purple Team (Cyber Security), Terraform, Qualys, Key Vault, Static Application Security Testing, Vulnerability Analysis, Dynamic Application Security Testing - **Published:** July 30, 2026 - **Apply:** https://www.indeed.com/viewjob?jk=52f924a2db1d8215 ## About the Role * Bachelor's degree in Computer Science, Cybersecurity, or a related field, or equivalent practical experience * 5+ years in information security, including 3+ years focused on cloud security * Strong hands-on experience with Azure security services including Defender for Cloud, Sentinel, Entra ID, Key Vault, Azure Policy, and network security * Production experience with several of: SIEM, EDR/XDR, WAF, email security, CSPM/CNAPP, vulnerability management * Experience securing Kubernetes and containerized workloads in production * Experience embedding security testing into CI/CD pipelines using SAST, DAST, SCA, secrets scanning, and IaC scanning * Hands-on application security testing experience covering web and API penetration testing and secure code review * Proficiency with vulnerability management platforms such as Nessus, Nexpose, Qualys, or Defender Vulnerability Management * Python and SQL/KQL for automation, tooling, and log analysis * Working knowledge of NIST, ISO 27001, and SOC 2 * Incident response experience as a lead or primary responder * U.S. Citizenship required, * Experience securing edge, disconnected, or intermittently connected environments * Experience securing AI/ML or LLM-based systems, including OWASP Top 10 for LLM Applications and MITRE ATLAS * Detection engineering experience: writing and tuning KQL, detection-as-code, purple team exercises * Infrastructure-as-code fluency with Terraform or Bicep * Familiarity with MITRE ATT&CK for threat modeling and detection coverage mapping * Experience supporting SOC 2 Type II or FedRAMP audit cycles, At least one from either group is preferred. * Defensive and architecture: CISSP, CCSP, Azure Security Engineer Associate (AZ-500), GCIH, GCIA * Offensive: OSCP, OSWE, OSWP, OSEE, GPEN, GWAPT, CEH, * A go-getter with a growth mindset. You're intellectually curious, have strong business acumen, and actively seek opportunities to build relevant skills and knowledge * A detail-oriented problem-solver. You can independently gather information, solve problems efficiently, and deliver results with a "get-it-done" attitude * Thrive in a fast-paced environment. You're energized by an entrepreneurial spirit, capable of working quickly, and excited to contribute to a growing company * A collaborative team player. You focus on business success and are motivated by team accomplishment vs personal agenda * Highly organized and results-driven. Strong prioritization skills and a dedicated work ethic are essential for you ## Description You will own security engineering across our Azure cloud, hybrid infrastructure, and edge computing platform. The work is hands-on: building detections, testing our own applications, hardening Kubernetes, and putting controls into CI/CD. You will also help define how we secure AI/ML workloads running at the edge., * Design and implement security architecture across Azure, hybrid infrastructure, and edge deployments * Manage SIEM (Microsoft Sentinel), EDR/XDR, WAF, email security, and CSPM/CNAPP tooling * Write and tune detection rules, correlation logic, and automated response playbooks * Lead incident response from triage through containment and remediation Offensive Security and Assessment * Perform security assessments, vulnerability scanning, and penetration testing across cloud, infrastructure, and application layers * Test web applications and APIs for authentication and authorization flaws, business logic abuse, and OWASP Top 10 issues * Threat model new services and architectures before they ship * Own the vulnerability lifecycle: risk-based prioritization, SLA tracking, and remediation follow-through with owning teams * Maintain SAST, DAST, SCA, secrets scanning, IaC scanning, and container image scanning into CI/CD as automated gates * Harden the software supply chain: build provenance, artifact signing, SBOM generation, dependency governance * Enforce guardrails as policy-as-code using Azure Policy, OPA/Gatekeeper, or Kyverno * Review designs and code with engineering teams and support secure deployments AI/ML Security * Secure AI/ML development and deployment, including model and data supply chain integrity, inference endpoint exposure, prompt injection and agentic tool abuse, and training data governance Governance * Maintain security policies, standards, and procedures aligned to NIST, ISO 27001, and SOC 2 * Produce audit evidence and support customer security assessments * Track emerging threats and turn them into roadmap work ## Related Videos - [Back(end) to the Future: Embracing the continuous Evolution of Infrastructure and Code](https://www.wearedevelopers.com/videos/440-back-end-to-the-future-embracing-the-continuous-evolution-of-infrastructure-and-code) - [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers) - [You can’t hack what you can’t see](https://www.wearedevelopers.com/videos/41-you-can-t-hack-what-you-can-t-see) - [Checkmate: 5 Real Incidents That Can End a Software Company](https://www.wearedevelopers.com/videos/100126-checkmate-5-real-incidents-that-can-end-a-software-company) ## Related Articles - [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers) - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking) - [The 12 Best Jobs for Software Engineers](https://www.wearedevelopers.com/magazine/401-the-12-best-jobs-for-software-engineers) - [Why Upskilling And Reskilling is Important For Developers](https://www.wearedevelopers.com/magazine/428-why-upskilling-and-reskilling-is-important-for-developers) - [Top-Paying Tech Jobs (with Salaries)](https://www.wearedevelopers.com/magazine/372-top-paying-tech-jobs-with-salaries)