Cloud Security Engineer I (Microsoft M365 / Azure)

REMOTE OPPORTUNITY 

Summary

• The Cloud Security Engineer I (M365 / Azure) supports the implementation, administration, integration, and improvement of cybersecurity controls across Weill Cornell Medicine’s Microsoft enterprise cloud platforms, helping protect patient care, research, and education.
• This position provides the opportunity to develop experience across multiple areas of cloud infrastructure by applying risk analysis, industry knowledge, security standards, and cloud security best practices to support secure solutions without diminishing productivity.
• Working under the guidance of more senior cloud security engineers and architects, this position assists with cloud security and identity implementations, integrations, automation, logging, escalated incident response, vulnerability remediation, and operational readiness.
• As experience increases, the individual is expected to become progressively more independent and proactive in managing assigned cloud security technologies, tasks, and projects.

Job Responsibilities

• Owns, with guidance, a defined set of day-to-day security operations from the start, such as Microsoft Purview DLP alert triage and policy tuning, and Conditional Access change review.
• Assists architects and senior engineers with the implementation, configuration, administration, and maintenance of security and identity controls across Microsoft 365 (Office 365) and Microsoft Azure environments.
• Assists with security controls for M365 and Azure services, including identity and access management, endpoint and mobile device security, network security, encryption, logging and monitoring, governance, and data protection.
• Triages and tunes Microsoft Purview Data Loss Prevention alerts and policies, and assists with information protection controls to support the secure use, storage, and sharing of institutional data.
• Supports endpoint and mobile device security management through Microsoft Intune and related technologies.
• Participates in escalated M365 and Azure security monitoring and incident response activities, including assisting with the creation, testing, and execution of playbooks.
• Assists with configuring, analyzing, and integrating M365 and Azure logs with SIEM and other event-monitoring platforms.
• Assists with automating repeatable M365 and Azure security tasks and processes using scripting, APIs, or other automation technologies.
• Participates in M365 and Azure security projects and completes assigned technical tasks according to established requirements, timelines, architecture, and security standards.
• Supports compliance with the HIPAA Security Rule, NIST CSF, and Zero Trust initiatives by gathering evidence, remediating findings, and maintaining control documentation.
• Develops and maintains technical documentation, procedures, diagrams, configuration information, and operational support documentation.
• Works collaboratively with M365 administrators, endpoint and cloud engineers, cybersecurity engineers, architects, analysts, application teams, vendors, and other technology teams to support secure M365 and Azure environments.
• Stays current with evolving M365 and Azure cybersecurity threats, technologies, services, and industry best practices and develops technical skills required to assume greater responsibility.
• Performs other related duties as assigned.