Security Engineer - Azure Government

X Corp

CA

JOB DETAILS
SALARY
$180,000–$440,000 Per Year
SKILLS
ARM (Advanced RISC Machine), Amazon Web Services (AWS), Analysis Skills, Applications Security, Artificial Intelligence (AI), Benchmarking, Blueprints, CCSP - Cisco Certified Security Professional, CISSP - Certified Information Systems Security Professional, Cloud Computing, Communication Skills, Computer Security, Continuous Deployment/Delivery, Continuous Integration, Cryptography, Denial of Service (DoS), DevOps, Disability Insurance, Docker, Firewalls, Forensic Science, GCP (Good Clinical Practices), Government, Government Regulations, Hunting, Identity Data Management, Identity Federation, Incident Response, Industry Standards, Information/Data Security (InfoSec), Internet Application, Internet Security, Just in Time (JIT), Life Insurance, Maintain Compliance, Microsoft Access Database, Microsoft Product Family, Microsoft Windows Azure, Network Architecture/Engineering, Network Security, Presentation/Verbal Skills, Problem Solving Skills, Product Lifecycle, Protective Services, Protocol Independent Multicast (PIM), Regulations, Regulatory Compliance, Scripting (Scripting Languages), Security Architecture, Security Clearance, Security Compliance, Security Design, Security Infrastructure, Security Monitoring, Software Engineering, Top Secret Clearance, U.S. National Institute of Standards and Technology (NIST), United States Department of Defense (DoD), Windows PowerShell, Writing Skills
LOCATION
CA
POSTED
30+ days ago

About the RoleWe are seeking a skilled Azure Security Engineer to design, implement, and maintain robust security controls across our Azure Gov Cloud environment (including hybrid and multi-cloud scenarios). In this hands-on role, you will build, strengthen, and maintain our cloud security posture, protect critical workloads, and collaborate with engineering, DevOps, and compliance teams to embed security throughout the development lifecycle. You will develop, implement, and leverage Microsoft's native security tools to detect threats, respond to incidents, and ensure alignment with industry standards and regulations. Lastly, you will be required to both achieve and maintain compliance with government regulations such as FedRAMP and CMMC.Key Responsibilities:Implement, design, and manage security architecture for Azure Government and Commercial deployments (with considerations for DoD IL5\IL6 and FedRAMP High controls)Configure and optimize Microsoft Defender for Cloud, Microsoft Sentinel, Microsoft Defender for Endpoint, and related services for threat detection, vulnerability management, and automated responseDesign and enforce identity & access management using Microsoft Entra ID, Privileged Identity Management (PIM), Conditional Access policies, RBAC, and just-in-time accessSecure network architectures with Azure Firewall, Network Security Groups (NSGs), DDoS Protection, Web Application Firewall (WAF), Network Watcher, and private endpointsProtect data at rest and in transit via Azure Key Vault, encryption strategies, data classification, and information protection controlsDevelop and maintain security policies, initiatives, and blueprints using Azure Policy and Microsoft Purview for compliance (NIST, FedRAMP, CMMC, STIGs, etc.)Perform threat hunting, incident response, and forensics using Sentinel playbooks, Log Analytics, and KQL queriesConduct security reviews of Infrastructure as Code (IaC), containers, Kubernetes (AKS), and serverless workloadsCollaborate with developers and architects to implement DevSecOps practices, including secure CI/CD pipelines, code scanning, and secure defaultsMonitor and remediate security findings, reduce attack surface, and improve overall security posture per the Microsoft Cloud Security Benchmark (MCSB)Deploy configurations and compliance policies to Azure AVD endpoints using Intune and other Azure native services.Required Qualifications:Active U.S. security clearance (e.g., Secret, Top Secret) or eligibility to obtain one.3+ years of experience in cloud security, cybersecurity engineering, or related roles (with strong Azure focus)Deep hands-on expertise with core Azure security services: Microsoft Defender suite, Sentinel, Intune, Entra ID, Key Vault, Azure Policy, Firewall, Network Watcher, and PurviewStrong understanding of DLP implementation both in cloud and on endpoints utilizing Purview and other Microsoft native controlsExperience implementing security in hybrid/multi-cloud environmentsProficiency in scripting/automation (PowerShell, Azure CLI, Bicep/ARM templates, Terraform)Strong understanding of identity federation, zero-trust principles, encryption, network security, and vulnerability managementFamiliarity with compliance frameworks (NIST, FedRAMP, CMMC, STIGs, etc.) and regulatory requirementsExcellent problem-solving, analytical, and communication skillsStrong verbal and written communication skills and the ability to stay composed under pressure.Preferred Qualifications:Microsoft Certified: Azure Security Engineer Associate (AZ-500), Microsoft Cybersecurity Architect (SC-100)Additional relevant certifications (e.g., CISSP, CCSP, Microsoft Certified: Azure Administrator, AWS Security Specialty, SANS GCPS, SANS GCAD)Deep experience with detection and response engineering and SOC operationsKnowledge of container security (Docker, AKS), secure DevOps, or AI/ML workload protectionPrior experience in government regulations frameworks such as FedRAMP and CMMC.Annual Salary Range$180,000 - $440,000 USDBenefitsBase salary is just one part of our total rewards package at xAI, which also includes equity, comprehensive medical, vision, and dental coverage, access to a 401(k) retirement plan, short & long-term disability insurance, life insurance, and various other discounts and perks.

About the Company

X

X Corp