Own reporting and remediation workflows for DAST findings, working with development teams to prioritise and close out vulnerabilities.
Support and extend the wider DevSecOps pipeline: Threat Modelling / security architecture review, Software Configuration Analysis (SCA) and Static Application Security Testing (SAST) at build time.
Evaluate and pilot Interactive Application Security Testing (IAST) where suited to the application stack in use.
Contribute to Cloud Security Posture Management (CSPM) — monitoring Azure configuration, compliance and vulnerabilities — and to Runtime Application Self-Protection (RASP) for production workloads.
Act as a shared-responsibility partner alongside Development, Security and Operations: automate security checks in the pipeline, harden deployment configurations, and keep systems patched and up to date.
2. GitHub Enterprise & CI/CD
Administer and optimise GitHub Enterprise (or Azure DevOps) to support development teams; build and maintain CI/CD pipelines (GitHub Actions / YAML pipelines) for build, test, security-scan and release stages.
Manage build agents (Linux and Windows), Git repositories, branching strategies (GitFlow / trunk-based) and Personal Access Token (PAT) governance.
Lead migration of source repositories from GitLab, Bitbucket, SVN and other platforms into GitHub Enterprise, ensuring data integrity, security and minimal downtime.
Implement security best practice within the GitHub Enterprise ecosystem (branch protection, secret scanning, access control).
3. Cloud Infrastructure (Azure)
Operate and improve Azure infrastructure: VMs/VMSS, Azure Kubernetes Service (AKS), Application Service Environment (ASE), Azure SQL Database, Cosmos DB, Storage (Blob/File), Data Factory.
Manage networking and security controls: VNETs, NSGs, Private Endpoints/Private Link, Application Gateway and WAF, Key Vault.
Build and maintain Infrastructure as Code using Crossplane, Terraform or ARM templates; use Packer for image creation and Ansible for configuration management.
4. Containers & Microservices
Manage AKS clusters, pod deployment and scaling, Helm charts, Istio service mesh, Flannel networking and ingress controllers.
Support containerisation practices (Docker) and container registries (Harbor, Amazon ECR, Azure ACR).
Automate deployment using Argo CD and integrate deployment automation with the broader CI/CD toolchain.
5. SDLC Toolchain & Binary Management
Manage binary repositories (Nexus) and support migration from legacy tools (e.g. Artifactory) as part of platform modernisation.
Work across the full SDLC toolchain cluster: build/package management, container registries, deployment automation and monitoring.
6. Scripting & Automation
Develop automation using Bash/Shell, PowerShell and Python (preferred) across Azure CLI, Azure PowerShell and REST APIs.
Build scripts and tooling to automate security checks, infrastructure changes and repetitive operational processes.
7. Databases
Support Azure SQL administration, performance tuning, backup/restore and on-premises-to-Azure migration.
Support NoSQL platforms — MongoDB (PaaS and VM-hosted) and Azure Cosmos DB.
8. Monitoring & Observability
Maintain dashboards and alerting in Dynatrace (primary platform), Grafana, Kibana (ELK), Azure Monitor/Log Analytics and Application Insights.
Support incident management, log analysis, troubleshooting and performance monitoring across environments.
9. Collaboration
Work in agile teams using Jira for issue tracking and Confluence for documentation; contribute to agile ceremonies and continuous improvement.
Partner with development, operations and security teams to understand needs, provide solutions, and troubleshoot toolchain issues.
Provide training and support on best practice within GitHub Enterprise and the wider DevSecOps toolchain.
DevSecOps Methodology — Practices Covered by This Role
The table below reflects AZT's DevSecOps approach: security integrated continuously across the SDLC rather than concentrated at the end. DAST is the current priority delivery focus.
Practice (SDLC Stage)
Scope & Focus
Threat Modelling (Plan / Design)
Identify threats against architecture components — user interfaces, data flows, data processes, data storage. Rate and prioritise remediation. Supported by AZT's global Threat Modelling service.
Software Configuration Analysis — SCA (Develop)
Detect vulnerabilities in open-source dependencies; produce SBOMs and check licence attribution/compliance. Typically bundled with SAST tooling (GHAS).
Static Application Security Testing — SAST (Build)
Analyse source code for vulnerabilities before runtime, without executing the application. Performed once code is feature-complete; earliest and cheapest point to fix defects (shift-left).
Dynamic Application Security Testing
Simulate real-world attacks against the running application: crafted requests, response analysis, and detection of AuthN/AuthZ flaws, session-management issues, misconfiguration and insecure workflows. This is a priority project for AZT Ireland and the primary near-term focus of this role.
Interactive Application Security Testing — IAST (Test)
Agent/sensor-based testing that combines SAST- and DAST-style visibility across code, data flow, requests/responses and configuration; traces exploitable vulnerabilities back to source. Suited to web, mobile, microservice and API-based applications; tool selection depends on the application stack in use.
Cloud Security Posture Management — CSPM (Release / Deploy)
Continuous monitoring of cloud configuration, compliance and vulnerabilities across cloud services and resources; unifies visibility across providers into a single console.
Runtime Application Self-Protection — RASP (Operate / Monitor)
Embedded security agents that monitor application behaviour and block attacks in real time at the application layer, complementing network-level controls.
Qualifications
Required
Bachelor's degree in Computer Science, Information Technology, or related field (or equivalent hands-on experience).
Proven DevOps/DevSecOps experience with a strong focus on the GitHub Enterprise ecosystem and CI/CD pipeline creation (GitHub Actions).
Hands-on experience with Azure infrastructure services listed above, and with Infrastructure as Code (Terraform, ARM, or Crossplane).
Practical experience with at least one application security testing practice (SAST, DAST or IAST); willingness and ability to lead DAST implementation specifically.
Experience with Kubernetes (AKS), Helm and container registries (Nexus, Harbor, ECR or ACR).
Strong scripting ability (Python preferred; Bash/PowerShell) and comfort with Azure CLI/REST APIs.
Experience with monitoring tools such as Dynatrace, Grafana or the ELK stack.
Experience working in agile teams using Jira and Confluence.
Strong communication and cross-team collaboration skills, and sound understanding of security best practice and compliance standards.
Preferred
Certifications in DevOps and/or security-related fields.
Prior involvement in a DAST or broader application-security-testing rollout.
Experience with Azure Cosmos DB, MongoDB, and cloud-to-cloud or on-prem-to-cloud database migrations.
Experience with repository migration (GitLab, Bitbucket, SVN → GitHub Enterprise).
Familiarity with Cloud Security Posture Management (CSPM) and Runtime Application Self-Protection (RASP) tooling.
Good to have
Having a basic understanding or exposure to AI tools would be a plus.
Familiarity with basic AI tools is considered an advantage.
Basic knowledge or experience with AI tools will be beneficial.
Exposure to AI tools, even at a basic level, is a value-add.A fundamental grasp of AI tools will be an added benefit.
Your benefits:We offer a hybrid work model which recognizes the value of striking a balance between in-person collaboration and remote working incl. up to 25 days per year working from abroadWe believe in rewarding performance and our compensation and benefits package includes a company bonus scheme, pension, employee shares program and multiple employee discounts (details vary by location)From career development and digital learning programs to international career mobility, we offer lifelong learning for our employees worldwide and an environment where innovation, delivery and empowerment are fosteredFlexible working, health and wellbeing offers (including healthcare and parental leave benefits) support to balance family and career and help our people return from career breaks with experience that nothing else can teach What We Offer About Allianz Technology With its headquarters in Munich, Germany, Allianz Technology is Allianz's global IT service provider and delivers IT solutions that drive the group's digitalization. With more than 11,000 employees in over 20 countries around the world, Allianz Technology is tasked with running, optimizing, transforming, and innovating the infrastructure, applications, and services together with Allianz companies to co-create the best customer experience. We service the entire spectrum of digitalization – from one of the industry's largest IT infrastructure projects that spans data centres, networks, and security, to application platforms ranging from workplace services to digital interaction. In short: We deliver comprehensive end-to-end IT solutions for Allianz in the digital age. We are the backbone of Allianz. Find us at: www.linkedin.com/company/allianz-technology
Commitment to Integrity, Fairness & Inclusion Allianz Technology is proud to be an equal opportunity employer dedicated to fostering an inclusive work environment for everyone. We embrace individuals of all gender identities and expressions, sexual orientations, ethnicities, ages, nationalities, religions, disabilities, and philosophies of life. Ultimately, our greatest strength as a company lies in the unique skills, experiences, and backgrounds our employees contribute.
Allianz Group is one of the most trusted insurance and asset management companies in the world. Caring for our employees, their ambitions, dreams and challenges, is what makes us a unique employer. Together we can build an environment where everyone feels empowered and has the confidence to explore, to grow and to shape a better future for our customers and the world around us.
At Allianz, we stand for unity: we believe that a united world is a more prosperous world, and we are dedicated to consistently advocating for equal opportunities for all. And the foundation for this is our inclusive workplace, where people and performance both matter, and nurtures a culture grounded in integrity, fairness, inclusion and trust.
We therefore welcome applications regardless of ethnicity or cultural background, age, gender, nationality, religion, social class, disability or sexual orientation, or any other characteristics protected under applicable local laws and regulations.
Join us. Let's care for tomorrow.
