Azure Security Engineer
Skills
Microsoft AzureAzure Key VaultAzure SentinelIdentity And Access ManagementIncident ResponseMicrosoft DefenderMicrosoft Entra ID
What the job involves
The main requirements, responsibilities and hiring steps.
Requirements
- 4–7 years of cloud security engineering experience with Microsoft Azure
- Hands-on experience delivering Azure Policy, IaC guardrails, and CSPM/CWPP outcomes
- Experience configuring Microsoft Defender for Cloud Apps or an equivalent CASB solution
- Experience performing posture assessments against CIS Benchmarks or Microsoft Cloud Security Benchmark
- Strong knowledge of IAM networking encryption and cloud-native security tooling
- Experience securing hybrid environments spanning on-premises and Azure
- Scripting and automation expertise with KQL Python Bash PowerShell Terraform Bicep or ARM
- AZ-500 certification required CCSP or equivalent preferred
- Ability to work independently and deliver against defined milestones
Nice to have
- Independent
- Detail-oriented
- Analytical
- Collaborative
Day to day
- Support the design and implementation of Azure landing zone controls, identity, and network guardrails.
- Configure and tune cloud-native security services including Microsoft Sentinel and Defender XDR.
- Perform CSPM assessments, deliver prioritized remediation plans, and improve secure posture across Azure workloads.
- Build policy-as-code, automate remediation, and document standards, runbooks, and reference architectures.