Cloud applications & DevOps security engineer

About the role

The Cloud Applications & DevOps Security Engineer is a key member of the Cyber and Data Protection team within Forvis Mazars’ Technology & Digital Solutions organization. The role ensures that all applications, DevOps pipelines and Cloud Access Security Broker (CASB) services are built, run and monitored in line with security best‑practice and compliance requirements. You will work with global stakeholders to define standards, drive continuous improvement and act as the security referent for cloud‑native workloads.

Key responsibilities

• Define and manage the Forvis Mazars CASB project.
• Define and maintain application, DevOps and CASB security standards.
• Monitor security compliance and produce performance reports and KPIs.
• Manage global compliance for tools such as Defender for Cloud Apps and Falcon Shield.
• Write and maintain security processes and procedures, including local country compliance.
• Provide Level‑3 support to internal teams and investigate security incidents.

Required profile

• Bachelor’s degree in Computer Science, IT or related field (Master’s with cybersecurity specialization preferred).
• Minimum 5 years of IT experience with at least 2 years in cybersecurity or security management.
• Fluent English and at least one additional language.

Required skills

• Web‑application security concepts: API, authentication, encryption, SSO, token, federation.
• Programming languages: Java, PHP, HTML, CSS, JavaScript.
• DNS and SSL‑certificate management.
• CASB solution management (e.g., Microsoft Defender for Cloud Apps).
• Secure‑coding tools: Checkmarx, OWASP ZAP, dependency checkers.
• DevSecOps methodology: IaC, GitLab, CI/CD pipelines, SAST, DAST, IAST.
• Familiarity with security frameworks: NIST, ISO 27000 series, CIS, CISA Scuba, OWASP.
• Scripting: PowerShell (or similar).
• Nice‑to‑have: Azure infrastructure, virtualization (VM, Docker, VDI), security protocols (TLS, X509, ciphers, hashing, salting), Microsoft Defender Suite.