Azure Security Engineer (ID: 4026)

Azure Security Engineer (ID: 4026)

As an Azure Security Engineer, you will:

• Design, implement, and manage security controls across Azure subscriptions, resource groups, and cloud workloads.
• Configure and manage Microsoft Defender for Cloud for threat protection, security posture management, and risk remediation.
• Implement Azure network security controls including NSGs, Azure Firewall, WAF, DDoS Protection, VPN, and ExpressRoute security.
• Manage identity and access security using Microsoft Entra ID, including Conditional Access, MFA, PIM, and RBAC.
• Configure and manage Azure Key Vault for secrets, certificates, and encryption key management.
• Monitor security events and respond to incidents using Microsoft Defender and Microsoft Sentinel.
• Conduct security assessments, vulnerability scans, risk analysis, and remediation activities.
• Implement and enforce Azure Policy and governance controls to support security and compliance requirements.
• Perform log analysis and security monitoring using Azure Monitor and Log Analytics.
• Integrate security controls into CI/CD pipelines and support DevSecOps practices, including SAST and DAST scanning.
• Secure Infrastructure as Code environments using Terraform, ARM, and Bicep security practices.
• Prepare security documentation, audit evidence, compliance reports, and risk assessments.
• Collaborate with platform, DevOps, and compliance teams to embed security best practices into Azure architecture.
• Stay current with emerging Azure security features, cloud threats, vulnerabilities, and security best practices.

What You Bring to the Table:

• 6+ years of overall IT experience, with 3+ years of hands-on experience in Azure/Cloud Security.
• Strong hands-on experience with Microsoft Azure security architecture and cloud security controls.
• Proven experience with Microsoft Defender for Cloud and Microsoft Sentinel.
• Strong knowledge of Microsoft Entra ID, including Conditional Access, MFA, PIM, and RBAC.
• Hands-on experience with Azure network security services such as NSGs, Azure Firewall, WAF, DDoS Protection, VPN, and ExpressRoute.
• Proficiency in Azure Key Vault for secrets, certificates, and encryption key management.
• Strong understanding of Azure Policy, governance, security baselines, and compliance controls.
• Clear understanding of Infrastructure as Code (IaC) and security scanning for Terraform, ARM, and Bicep.
• Experience with vulnerability management, security assessments, and risk remediation.
• Familiarity with DevSecOps and integrating security tools into CI/CD pipelines.
• Scripting capabilities using PowerShell, Python, or Bash for security automation.
• Knowledge of security and compliance frameworks such as ISO 27001, SOC 2, NIST, GDPR, or HIPAA.
• Strong understanding of cloud threat detection, incident response, monitoring, and security operations.

You should possess the ability to:

• Analyze Azure security risks and recommend appropriate controls and remediation measures.
• Troubleshoot complex cloud security, identity, networking, and access-related issues.
• Detect, investigate, and respond effectively to security incidents and threats.
• Translate security requirements into practical Azure architecture and implementation controls.
• Automate security tasks and processes using PowerShell, Python, or Bash.
• Embed security practices throughout CI/CD and DevSecOps processes.
• Assess IaC configurations and identify security misconfigurations before deployment.
• Interpret security logs and identify suspicious activities using Azure Monitor, Log Analytics, Defender, and Sentinel.
• Apply security governance and compliance requirements consistently across Azure environments.
• Communicate security risks clearly to both technical and non-technical stakeholders.
• Work effectively with platform, DevOps, engineering, and compliance teams.

What We Bring to the Table:

• Opportunity to work on enterprise-scale Azure security environments and cloud workloads.
• Exposure to a broad range of Microsoft Azure security technologies and services.
• Opportunity to work across cloud security, identity, networking, governance, and DevSecOps domains.
• Hands-on involvement with modern security platforms such as Microsoft Defender for Cloud and Microsoft Sentinel.
• Exposure to enterprise identity and access management using Microsoft Entra ID.
• Opportunities to strengthen expertise in Azure security architecture and cloud governance.