Cloud Security Engineer

Cloud Security Engineer 

Location: Orlando, FL or Tampa, FL (Onsite, Full-Time)

Work Arrangement: This is an in-office position, open to local candidates only.

About the Role

Our firm is a large, multi-state law practice with a sophisticated technology environment and a deep responsibility to protect highly sensitive client and matter data. We are seeking a Cloud Security Engineer to strengthen and mature our Microsoft-centered security program. This is a hands-on engineering role for someone who thrives on threat detection, tenant hardening, identity modernization, and security automation - and who can clearly communicate risk and remediation to both technical teams and firm leadership.

Key Responsibilities

Detection and Response

• Engineer, tune, and operate detections and response workflows across Microsoft Defender XDR and Microsoft Sentinel, including authoring and optimizing KQL queries, analytics rules, workbooks, and hunting content.

Tenant and Endpoint Hardening

• Lead and execute M365 tenant hardening initiatives across the E5 stack, establishing and maintaining secure baselines and configuration standards.
• Administer and harden endpoint security through Microsoft Defender for Endpoint and Intune, including device compliance, configuration profiles, and attack surface reduction.

Security Automation and Vulnerability Management

• Build and maintain security automation (e.g., Logic Apps, automation rules/playbooks, PowerShell, Azure Functions) to reduce manual effort and accelerate response.
• Own vulnerability assessment and remediation tracking, partnering with IT and infrastructure teams to close gaps.

Cloud, Identity, and Data Governance

• Secure and govern Azure infrastructure, applying cloud security best practices across resources and workloads.
• Configure and manage Microsoft Purview for data governance, information protection, data loss prevention, insider risk, and compliance.
• Strengthen identity and access management (IAM) practices firm-wide, including least-privilege enforcement and access reviews.

AI Security and Documentation

• Secure and govern AI and AI agents across the firm, addressing data exposure, identity and access for agents, acceptable-use controls, and the confidentiality and privilege concerns unique to a legal environment.
• Document standards, procedures, and runbooks; communicate security posture, incidents, and recommendations clearly to technical staff and firm leadership.
• Manage application security assessments and lifecycle oversight to retire applications that are inactive or pose security risks.

Qualifications

• Strong hands-on expertise across: Defender XDR enterprise defense suite and Microsoft Sentinel with proficient KQL; M365 tenant hardening (Entra ID, Exchange, Teams, SharePoint); Azure infrastructure security; security automation (SOAR); Entra ID and Conditional Access; vulnerability assessment; Defender for Endpoint, Intune, Application Control; and Microsoft Purview (DSPM, IP, DLP, IRM, DLM, AI).
• Strong technical, organizational, time-management, and communication skills.
• Participate in scheduled after-hours changes as needed.

Education and Experience

• Experience at a law firm or in a similarly regulated, confidentiality-driven environment.
• Demonstrated experience securing AWS and/or GCP environments in enterprise settings.
• Experience designing and implementing security controls for AI and agent-based workloads.
• 4–7+ years of experience as a Security Engineer at a large, multi-state organization.

#LI-MB1