Cloud Security Engineer

Accountabilities

• Design, implement, and continuously improve security controls and configuration baselines across Microsoft Azure and Microsoft 365 in alignment with recognized security standards and frameworks.
• Configure, administer, and optimize cloud security technologies including Microsoft Defender for Cloud, Microsoft Defender for Endpoint, Microsoft Defender for Cloud Apps, and related solutions.
• Conduct security assessments of cloud resources, applications, Azure Kubernetes Service (AKS), and containerized workloads to identify vulnerabilities, misconfigurations, excessive permissions, and other security risks.
• Manage vulnerability remediation activities by prioritizing findings, coordinating corrective actions, and validating that identified issues have been properly resolved.
• Configure and enhance cloud security monitoring, threat detection, investigation, response, and automation using Microsoft Sentinel, Kusto Query Language (KQL), and related technologies.
• Partner with Cloud, Compliance, and other cross-functional teams to ensure cloud services are securely designed, deployed, maintained, and hardened according to organizational and industry standards such as CIS Benchmarks and DISA STIGs.
• Respond to customer security inquiries, assessments, and questionnaires by gathering, validating, and clearly communicating information about security controls, technologies, and practices.
• Develop and maintain technical documentation, procedures, dashboards, alerts, and security reporting to strengthen visibility and operational effectiveness.
• Support internal and external audits by gathering evidence, validating control adherence, and demonstrating compliance with organizational, customer, and regulatory requirements.
• Participate in cloud security incident response by investigating suspicious, anomalous, or unauthorized activity and supporting broader security investigations.
• Continuously identify opportunities to improve cloud security processes, controls, automation, and operational resilience.

Requirements

• Bachelor’s degree in Cybersecurity, Computer Science, Engineering, or a related technology field, or equivalent professional experience.
• At least 3 years of experience securing cloud-based infrastructure, services, and technologies.
• Demonstrated ability to identify, assess, and mitigate security risks within cloud environments.
• Practical experience securing Microsoft Azure through secure configuration, least-privilege access, data protection, threat detection and response, and security hardening.
• Experience deploying, administering, and using security technologies such as Microsoft Defender, SIEM, CASB, vulnerability management platforms, and related security solutions.
• Working knowledge of Azure Log Analytics, Kusto Query Language (KQL), PowerShell, Bash, and REST APIs.
• Understanding of identity and access management concepts, including Microsoft Entra ID, RBAC, authentication, authorization, and least-privilege access.
• Working knowledge of Windows and Linux operating systems.
• Familiarity with incident response, incident management, and change management processes.
• Strong analytical, troubleshooting, and problem-solving capabilities.
• Excellent written, verbal, and presentation skills, with the ability to communicate technical concepts to both technical and non-technical stakeholders.
• Strong organizational and prioritization skills, with the ability to manage competing priorities in a fast-paced environment.
• Demonstrated initiative, accountability, attention to detail, adaptability, and commitment to continuous learning.
• Experience with a Cloud Service Provider, Managed Service Provider, SaaS provider, or similarly regulated cloud environment is preferred.
• 5+ years of Microsoft Azure experience, particularly securing cloud-native technologies, AKS, and containerized workloads, is a plus.
• Knowledge of security and compliance frameworks such as NIST 800-53, FedRAMP, SOC 1, SOC 2, or ISO 27001 is advantageous.
• Familiarity with IAM technologies and protocols such as Okta, SAML, OAuth, and OpenID Connect (OIDC) is preferred.
• Experience with Infrastructure as Code and deployment technologies such as ARM, Bicep, Terraform, and Azure DevOps pipelines is a plus.
• Working knowledge of network security principles, TCP/IP, DNS, TLS, and firewall technologies is advantageous.
• Familiarity with Agile, Scrum, and DevSecOps methodologies is preferred.
• Relevant cybersecurity certifications such as AZ-500, AZ-104, SC-200, SC-300, SC-100, Security+, Cloud+, or equivalent are beneficial.
• Candidates must be legally authorized to work in the United States without requiring employment sponsorship.

Benefits

• Competitive annual base salary of $86,000–$112,000, with additional variable compensation and benefits potentially available based on experience, skills, and location.
• Comprehensive medical insurance.
• Dental and vision insurance.
• Life insurance.
• Short- and long-term disability coverage.
• 401(k) retirement plan.
• Paid vacation and holidays.
• Professional development and continuing learning opportunities.
• Multiple training opportunities to support technical and career growth.
• Exposure to varied cloud security projects and modern cybersecurity technologies.
• Collaborative culture focused on customer success, transparency, and strong team relationships.
• Remote working opportunity within the United States.