Cloud Security Engineer

About this role

Cloud Security Engineer

Position Summary:

As a Cloud Security Engineer, you will design, implement, and operate security controls primarily across Microsoft Azure environments, with potential expansion to other leading cloud platforms over time. You will build guardrails, monitor posture, and respond to cloud threats while enabling teams to move quickly and safely. Focus on cloud security architecture, best practices, resource standards, configuration management and detection.

Your responsibilities:

• Lead design and implementation for cloud landing zones, identity, and network controls (VPC/VNet, security groups/NSGs, private endpoints).
• Configure cloud-native security services (e.g., Microsoft Defender for Cloud, Microsoft Sentinel, Defender XDR).
• Build posture management (CSPM) and workload protection (CWPP) with policy-as-code and automated remediation.
• Implement key management, encryption at rest/in transit, and certificate governance using KMS/Key Vault/Cloud KMS.
• Establish logging, telemetry, and alerting (Azure Monitor) integrated to SIEM/XDR. Work with key team members across IT and Security to test and validate total coverage / maturity of detection telemetry from cloud native sources.
• Determine architecture as needed to harden serverless containers, and managed services (Functions, Logic Apps, Container Apps, AKS, ACI) with baseline controls.
• Perform threat modeling and security reviews for cloud architectures and application designs.
• Partner with platform and product teams to deliver IaC guardrails, image baselines, and patch/vulnerability workflows.
• Respond to cloud incidents as a point of escalation; perform triage, containment, and post-incident improvements. Develop automation architecture where applicable to optimize cloud detection and response capabilities. Leverage automation and AI-assisted capabilities where appropriate to enhance cloud detection and response.
• Document standards and runbooks; conduct enablement sessions wi...