REMOTE - Sr. Security Engineer - Cloud Security & Detection

REMOTE
- Sr. Security Engineer
- Cloud Security & Detection

We are a boutique IT consulting and business process outsourcing organization supporting mid to enterprise-level organizations. We are a small, but mighty, team of experts who know how to stretch, adapt, and put on any hat required in the moment to make our clients successful and enable

Fortellar’sgrowth. Keys to success at Fortellar include:

• Collaboration: Youdemonstrateexcellence in remote collaboration across your Fortellar and client teams.
• Growth Mindset: You embrace personal growth and are always learning new things to support yourteam, your clients, and your personal goals.
• Client Success: You have a passion for your client’s success – youdon’tjust delivery to the contract you ensure that your client’s goals and needs are met.
• Humanity First: Honest and transparency are your natural instincts – your actions speak louder than your words and your team members love working with you.
• Entrepreneurial: You find a way to get it done, no matter what the challenges or seeming blockers are in front of you

Job Description Summary

The Sr. Security Engineer, Cloud Security & Detection designs, deploys, and operates cloud security posture, data protection, and detection and response capability for Fortellar's clients, with primary assignment to large-scale, multi-workstream security remediation engagements. The role is typically responsible for closing the largest single pool of open findings in the client estate, and for transitioning detection and data security capability off incumbent external vendors and onto the Microsoft platform the client already licenses.

Engagements involve cloud estates carrying substantial backlogs of open posture findings, together with Microsoft Sentinel, Microsoft Defender for Cloud, Microsoft Defender XDR, and Microsoft Purview.

This is a hands-on engineering role with direct client exposure. The engineer is accountable for standing up a detection capability that must be proven equivalent to an incumbent managed service before that service is decommissioned, and for clearing an incident backlog in an environment where no response process previously operated. The role requires deep Azure and Microsoft security platform expertise, real incident response experience, strong verbal and written communication, and the professional presence to represent Fortellar credibly in front of client technical staff and executives, both in person and virtually.

Must be able to travel 10% - 20% to client sites

Cloud Security Posture Engineering

• Assign a named owner and a closure date to every open cloud finding, and review all standing exemptions, revoking those without a written rationale and an expiry date.
• Eliminate anonymous and public access from internet-facing cloud resources, including enabling authentication on function applications and removing public access from storage accounts.
• Rotate and remove verified secrets embedded in cloud resources, and disable shared-key access across storage accounts, prioritizing those holding sensitive data.
• Establish private link connectivity, network rules, and network security group coverage as platform standards, and adopt managed identity for web applications and functions.
• Route diagnostic and platform logging into Microsoft Sentinel, and manage ingestion scope and cost against the agreed platform budget.
• Implement landing-zone guardrails as policy-as-code so that remediated configuration cannot regress, and review identified attack paths on a monthly cadence.

Security Operations and Incident Response

• Triage and close the standing backlog of high-severity security incidents, establishing disposition and evidence for each.
• Author and publish the incident response plan, severity matrix, and…