Security Engineer(Azure)

Key Responsibilities:
Developing, enhancing, and maintaining Security Operations Center (SOC) standard operating procedures (SOPs) and assessment operations processes.
Ensuring accountability, integrity, confidentiality, and protection of operational security processes and data.
Performing vulnerability analysis, reviewing program-level documentation (system requirements, architectures, design documents, test plans, security plans), and providing technical recommendations.
Developing and documenting security evaluation plans, test procedures, and assessment methodologies.
Conducting hands-on security testing, analyzing results, identifying risk, and recommending countermeasures.
Assessing and calculating risk based on identified threats, vulnerabilities, and security control weaknesses.
Identifying and documenting mitigation strategies for threats, vulnerabilities, and deficiencies.
Supporting the design, development, and implementation of security-related systems, tools, and assessment capabilities.
Participating in or leading technical exchange meetings, documenting action items and outcomes, and briefing leadership on security engineering status and results.
Supporting SOC alert analysis, triage, escalation, containment actions, and continuous improvement of detection and response use cases.
Leading the engineering and implementation of secure cloud solutions primarily in Microsoft Azure in alignment with the organization's cybersecurity strategy and Federal compliance mandates (e.g., NIST, FISMA, FedRAMP).
Integrating Zero Trust security principles across Azure cloud environments, including identity hardening, micro-segmentation, conditional access, and continuous monitoring.
Configuring and operationalizing Azure cloud platform services including:
Azure Kubernetes Service (AKS) secure cluster configuration, governance, and node-pool hardening
Azure policy creation and enforcement
Secure Landing Zones following Azure enterprise-scale frameworks
Role-Based Access Control (RBAC) and least-privilege access models
Resource tagging, naming standards, and governance implementation

Qualifications:
Technical Proficiency: Demonstrated experience implementing and securing Azure cloud services including AKS, Azure Policy, Azure AD/Entra, Conditional Access, RBAC, and Zero Trust controls. Ability to evaluate security documentation and develop security test plans, evaluation methodologies, and technical recommendations. Ability to coordinate across cybersecurity teams and communicate technical information to leadership.
Compliance: Ensure compliance with Federal cybersecurity regulations, including NIST, FISMA, and associated guidance. Ensure artifacts, assessments, and system configurations remain aligned with NIST SP 800-53 controls, FedRAMP baselines, Federal agency policy and directives.
Certifications:
CISSP or equivalent Cybersecurity certification (e.g., Security+).
Cloud Architecture/Engineer or similar certification (Azure is a plus).

Preferred Expertise
Demonstrated success supporting Federal contracts.
Strong background coordinating with stakeholders (e.g., system owners, ISSOs, architecture teams, and cybersecurity leadership) to validate cybersecurity requirements, address information assurance concerns, and resolve compliance or security issues.
Strong analytical, written, and verbal communication skills, with the ability to translate technical risks and content into terms suitable for executive and government stakeholders.
Ability to work collaboratively with others and contribute to a team environment.

Education & Experience:
Education: Bachelor's degree in Cybersecurity, Information Technology, Computer Science or related field
Experience: Minimum of 8 years of cybersecurity experience.