Senior Cloud Security Engineer

We are seeking an experienced Senior Cloud Security Engineer to support enterprise Azure cloud migration, infrastructure security, and cloud security operations. The ideal candidate will have strong hands-on expertise in Azure cloud security, enterprise cloud engineering, cybersecurity, and security architecture.

The candidate will help design, implement, monitor, and continuously improve secure cloud environments aligned with Zero Trust principles, SEC530, and enterprise security compliance frameworks.

Key Responsibilities

• Design, implement, and maintain secure enterprise Azure cloud environments.

• Identify cloud security vulnerabilities, assess risks, prioritize remediation, and validate corrective actions.

• Lead cloud security initiatives and provide technical guidance to engineering teams.

• Implement security controls and security gates within deployment pipelines.

• Develop Azure Policies to enforce security standards and compliance requirements.

• Create Azure Automation runbooks to support incident response workflows.

• Monitor security events using SIEM tools and coordinate incident response with SOC teams.

• Investigate and contain cloud security incidents, including log analysis and threat detection.

• Review Azure Firewall, Network Security Group (NSG), and network security configurations.

• Implement identity and access management controls, including RBAC, PAM, MFA, and least-privilege access.

• Support vulnerability management, cloud security posture management, threat hunting, and remediation tracking.

• Prepare security documentation, architecture diagrams, audit evidence, and compliance assessments.

• Collaborate with cloud engineering, network engineering, DevOps, application development, and security governance teams.

• Communicate security risks to technical teams, management, and non-technical stakeholders.

Required Qualifications

• Minimum 8 years of enterprise cloud experience.

• Minimum 5 years of enterprise cloud security experience.

• Strong hands-on experience with Azure cloud infrastructure and security engineering.

• Experience with Azure Firewall, Azure WAF, Application Gateway, Virtual Networks, NSGs, network segmentation, Azure Monitor, and Log Analytics.

• Experience with incident response, security investigations, threat intelligence, IOC analysis, log analysis, and security monitoring.

• Experience with SIEM platforms such as Splunk and Microsoft Sentinel.

• Hands-on experience with Splunk Query Language, indexer parsers, log management, security analytics, and threat hunting.

• Experience with vulnerability scanning tools such as Nessus, Tenable, or Microsoft Defender.

• Experience with CNAPP, CWPP, cloud security posture management, and attack surface management.

• Experience developing Azure Policies and Azure Automation runbooks.

• Strong knowledge of IAM, RBAC, PAM, MFA, and least-privilege access.

• Experience with SEC530, CIS Benchmarks, NIST CSF, NIST 800-53, and Zero Trust principles.

• Experience securing production cloud environments and working in regulated enterprise or government environments.

• Strong communication, technical leadership, and mentoring skills.

Required Certifications

• Azure Security Engineer Associate

• CompTIA Security+

• Certified Cloud Security Professional (CCSP)

Preferred: Designing Microsoft Azure Infrastructure (AZ-305).