Senior Cloud Security Engineer

We are seeking an experienced Senior Cloud Security Engineer with strong hands‑on expertise in Microsoft Azure cloud security, secure architecture, vulnerability management, security automation, and incident response. The ideal candidate will work closely with Cloud Engineering, Network Engineering, Security Operations (SOC), Enterprise Architecture, Infrastructure, Application Development, Dev Ops, Risk Management, and IT leadership to ensure cloud environments are secure, resilient, compliant, and aligned with enterprise security standards.

The candidate will lead complex cloud security initiatives, assess and mitigate security risks, implement preventive security controls, and drive security best practices across enterprise Azure environments.

• Identify, assess, prioritize, and remediate cloud security vulnerabilities based on risk and business impact. Track remediation activities and validate corrective actions.
• Lead complex cloud security initiatives and provide technical guidance to engineering teams.
• Design, review, and implement secure cloud architectures for complex enterprise environments.
• Evaluate proposed cloud solutions, identify security gaps, and recommend appropriate security controls and compensating controls.
• Influence architecture and security decisions to prevent insecure configurations from reaching production.
• Implement security gates and automated security checks within CI/CD pipelines and Dev Sec Ops  workflows.
• Develop, implement, and maintain Azure Policy definitions and initiatives to enforce enterprise security standards, governance, and compliance requirements.
• Create and maintain Azure Automation Runbooks to support security operations, remediation, and incident response workflows.
• Monitor cloud security events using SIEM technologies and collaborate with the Security Operations Center (SOC) to investigate and respond to security incidents.
• Lead the investigation, containment, and remediation of cloud security incidents using security logs, monitoring tools, diagnostic utilities, and threat detection technologies.
• Review Azure Firewall and Network Security Group (NSG) rule requests to ensure compliance with security standards, network segmentation requirements, and least‑privilege principles.
• Assess identity and access controls, network configurations, cloud resources, and security policies to identify misconfigurations and reduce attack surfaces.
• Develop and maintain security documentation, architecture and network topology diagrams, IP addressing schemes, access control documentation, and audit evidence.
• Support security audits, risk assessments, compliance reviews, and enterprise security assessments.
• Communicate complex technical security risks and remediation recommendations to technical teams, management, and non‑technical stakeholders.
• Work independently on assigned projects while collaborating across engineering, security, and business teams.

• Strong hands‑on experience in Microsoft Azure cloud security engineering and enterprise cloud environments.
• Experience designing, implementing, and reviewing secure cloud architectures and security controls.
• Knowledge of Azure security services, cloud security posture management, vulnerability assessment, and security remediation.
• Experience with Azure Policy, policy initiatives, governance, and compliance enforcement.
• Experience with Azure networking, Azure Firewall, Network Security Groups (NSGs), Virtual Networks (VNets), IP addressing, and network access controls.
• Experience with SIEM platforms, security event monitoring, incident investigation, threat detection, and incident response.
• Experience developing security automation using Azure Automation…