Senior Cloud Security Engineer

Job Summary

We are seeking an experienced Senior Cloud Security Engineer with strong hands-on expertise in Microsoft Azure cloud security, secure architecture, vulnerability management, security automation, and incident response. The ideal candidate will work closely with Cloud Engineering, Network Engineering, Security Operations (SOC), Enterprise Architecture, Infrastructure, Application Development, DevOps, Risk Management, and IT leadership to ensure cloud environments are secure, resilient, compliant, and aligned with enterprise security standards.

The candidate will lead complex cloud security initiatives, assess and mitigate security risks, implement preventive security controls, and drive security best practices across enterprise Azure environments.

Key Responsibilities

• Identify, assess, prioritize, and remediate cloud security vulnerabilities based on risk and business impact. Track remediation activities and validate corrective actions.
• Lead complex cloud security initiatives and provide technical guidance to engineering teams.
• Design, review, and implement secure cloud architectures for complex enterprise environments.
• Evaluate proposed cloud solutions, identify security gaps, and recommend appropriate security controls and compensating controls.
• Influence architecture and security decisions to prevent insecure configurations from reaching production.
• Implement security gates and automated security checks within CI/CD pipelines and DevSecOps workflows.
• Develop, implement, and maintain Azure Policy definitions and initiatives to enforce enterprise security standards, governance, and compliance requirements.
• Create and maintain Azure Automation Runbooks to support security operations, remediation, and incident response workflows.
• Monitor cloud security events using SIEM technologies and collaborate with the Security Operations Center (SOC) to investigate and respond to security incidents.
• Lead the investigation, containment, and remediation of cloud security incidents using security logs, monitoring tools, diagnostic utilities, and threat detection technologies.
• Review Azure Firewall and Network Security Group (NSG) rule requests to ensure compliance with security standards, network segmentation requirements, and least-privilege principles.
• Assess identity and access controls, network configurations, cloud resources, and security policies to identify misconfigurations and reduce attack surfaces.
• Develop and maintain security documentation, architecture and network topology diagrams, IP addressing schemes, access control documentation, and audit evidence.
• Support security audits, risk assessments, compliance reviews, and enterprise security assessments.
• Communicate complex technical security risks and remediation recommendations to technical teams, management, and non-technical stakeholders.
• Work independently on assigned projects while collaborating across engineering, security, and business teams.

Required Qualifications and Technical Skills

• Strong hands-on experience in Microsoft Azure cloud security engineering and enterprise cloud environments.
• Experience designing, implementing, and reviewing secure cloud architectures and security controls.
• Knowledge of Azure security services, cloud security posture management, vulnerability assessment, and security remediation.
• Experience with Azure Policy, policy initiatives, governance, and compliance enforcement.
• Experience with Azure networking, Azure Firewall, Network Security Groups (NSGs), Virtual Networks (VNets), IP addressing, and network access controls.
• Experience with SIEM platforms, security event monitoring, incident investigation, threat detection, and incident response.
• Experience developing security automation using Azure Automation Runbooks, PowerShell, or similar scripting technologies.
• Understanding of DevSecOps practices, CI/CD pipelines, automated security testing, and deployment security gates.
• Knowledge of identity and access management, role-based access control (RBAC), least privilege, and secure access principles.
• Experience with vulnerability management, risk assessment, security documentation, and audit evidence collection.
• Strong analytical, troubleshooting, documentation, and communication skills.
• Ability to lead technical initiatives, influence security decisions, and work independently in a cross-functional enterprise environment.

Preferred Qualifications

• Experience with Microsoft Defender for Cloud and Microsoft Sentinel.
• Experience with Kusto Query Language (KQL) for security investigations and log analysis.
• Experience with Terraform or other Infrastructure as Code (IaC) technologies and associated security controls.
• Familiarity with Azure DevOps, GitHub Actions, or similar CI/CD platforms.
• Relevant Microsoft Azure security certifications, such as Azure Security Engineer Associate (AZ-500), are a plus.
• Experience supporting enterprise security audits, compliance assessments, and cloud governance programs.