Azure Security Engineer

• Design, implement, and manage security controls across Azure subscriptions, resource groups, and cloud workloads.
• Configure and manage Microsoft Defender for Cloud for threat protection, security posture management, and risk remediation.
• Implement Azure network security controls including NSGs, Azure Firewall, WAF, DDoS Protection, VPN, and Express Route security.
• Manage identity and access security using Microsoft Entra , including Conditional Access, MFA, PIM, and RBAC.
• Configure and manage Azure Key Vault for secrets, certificates, and encryption key management.
• Monitor security events and respond to incidents using Microsoft Defender and Microsoft Sentinel.
• Conduct security assessments, vulnerability scans, risk analysis, and remediation activities.
• Implement and enforce Azure Policy and governance controls to support security and compliance requirements.
• Perform log analysis and security monitoring using Azure Monitor and Log Analytics.
• Integrate security controls into CI/CD pipelines and support Dev Sec Ops  practices, including SAST and DAST scanning.
• Secure Infrastructure as Code environments using Terraform, ARM, and Bicep security practices.
• Prepare security documentation, audit evidence, compliance reports, and risk assessments.
• Collaborate with platform, Dev Ops, and compliance teams to embed security best practices into Azure architecture.
• Stay current with emerging Azure security features, cloud threats, vulnerabilities, and security best practices.

• 6+ years of overall IT experience, with 3+ years of hands‑on experience in Azure/Cloud Security.
• Strong hands‑on experience with Microsoft Azure security architecture and cloud security controls.
• Proven experience with Microsoft Defender for Cloud and Microsoft Sentinel.
• Strong knowledge of Microsoft Entra , including Conditional Access, MFA, PIM, and RBAC.
• Hands‑on experience with Azure network security services such as NSGs, Azure Firewall, WAF, DDoS Protection, VPN, and Express Route.
• Proficiency in Azure Key Vault for secrets, certificates, and encryption key management.
• Strong understanding of Azure Policy, governance, security baselines, and compliance controls.
• Clear understanding of Infrastructure as Code (IaC) and security scanning for Terraform, ARM, and Bicep.
• Experience with vulnerability management, security assessments, and risk remediation.
• Familiarity with Dev Sec Ops  and integrating security tools into CI/CD pipelines.
• Scripting capabilities using Power Shell, Python, or Bash for security automation.
• Knowledge of security and compliance frameworks such as ISO 27001, SOC 2, NIST, GDPR, or HIPAA.
• Strong understanding of cloud threat detection, incident response, monitoring, and security operations.

• Analyze Azure security risks and recommend appropriate controls and remediation measures.
• Troubleshoot complex cloud security, identity, networking, and access‑related issues.
• Detect, investigate, and respond effectively to security incidents and threats.
• Translate security requirements into practical Azure architecture and implementation controls.
• Automate security tasks and processes using Power Shell, Python, or Bash.
• Embed security practices throughout CI/CD and Dev Sec Ops  processes.
• Assess IaC configurations and identify security misconfigurations before deployment.
• Interpret security logs and identify suspicious activities using Azure Monitor, Log Analytics, Defender, and Sentinel.
• Apply security governance and compliance requirements consistently across Azure environments.
• Communicate security risks clearly to both technical and non‑technical stakeholders.
• Work effectively with platform, Dev Ops, engineering, and compliance teams.

• Opportunity to work on enterprise‑scale Azure security environments and cloud workloads.
• Exposure to a broad range of Microsoft Azure security technologies and services.
• Opportunity to work across cloud security, identity, networking, governance, and Dev Sec Ops  domains.
• Hands‑on involvement with modern security platforms such as Microsoft Defender for Cloud and Microsoft Sentinel.
• Exposure to enterprise identity and access management using Microsoft Entra .
• Opportunities to strengthen expertise in Azure security architecture and cloud governance.

Want to discuss this opportunity in more detail? Feel free to reach out.