Role Summary

Individual contributor responsible for building and shipping features of an in-house Infosec Assessment Platform. The incumbent will write production-grade full-stack code using AI coding assistants (Claude Code, Codex, Cursor), deploy and operate the platform on Azure App Service, and embed basic security and DevSecOps controls into every layer.

Key Responsibilities

• Develop and maintain an in-house Information Security Assessment Platform using AI coding assistants.
• Build frontend and backend applications with secure authentication, role-based access, and REST APIs.
• Develop assessment workflows, security control catalogues, evidence management, scoring, and reporting dashboards.
• Deploy and manage applications on Azure App Service and Azure Functions.
• Implement Terraform/Bicep, CI/CD pipelines, and DevSecOps security checks.
• Integrate Microsoft Sentinel, Entra ID, ServiceNow/Jira, and security monitoring tools.
• Review AI-generated code and ensure quality, security, and performance.

Required Technical Skills

• AI Coding Tools: Claude Code, OpenAI Codex, Cursor, prompt engineering, MCP basics.
• Frontend: React, Next.js, TypeScript, Tailwind CSS.
• Backend: Node.js, Python, FastAPI, REST APIs.
• Database: PostgreSQL, Azure SQL, Redis, Service Bus.
• Azure: App Service, Functions, Key Vault, Entra ID, API Management, Private Link.
• DevOps: Azure DevOps, GitHub Actions, Docker, Terraform, Bicep.
• Security: SAST, SCA, Gitleaks, Trivy, OWASP Top 10, ISO 27001, NIST CSF, CIS Controls.
• Authentication: OIDC, SAML, MFA, OTP, RBAC.

Required Experience

• 6–9 years in software engineering, with at least 2 years in full-stack development.
• 1.5+ years in information security, GRC, SOC, or audit-related platforms.
• 1.5+ years in Azure deployments and DevSecOps.
• At least 1 year of production development using AI coding assistants.

Preferred Certifications

AZ-204, AZ-500, AZ-400, or SC-900.