- Own day-to-day security engineering for Azure environments, including secure configuration, cloud control hardening, logging, monitoring, and remediation follow-through
- Partner with Infrastructure and Engineering teams to implement Azure security baselines, secure networking patterns, key management practices, storage protections, and workload guardrails
- Support Microsoft Defender for Cloud, Azure Policy, Entra-adjacent cloud controls, conditional access inputs, and other Microsoft security capabilities
- Review hosted applications and third-party-developed cloud solutions for secure architecture, authentication, authorization, logging, data protection, and operational readiness
- Configure and improve security controls for SaaS platforms such as Salesforce, Box, Microsoft 365, and other business-critical cloud applications
- Support DevSecOps activities, including static and dynamic application-security testing coordination, vulnerability triage, and remediation guidance
- Integrate cloud, SaaS, and application telemetry into SIEM and detection workflows
- Partner with Security Operations on actionable alerting and response procedures
- Maintain sanctioned application lists, cloud security standards, exception records, and implementation documentation
- Execute immediate remediation actions and coordinate complex fixes across platform, application, and vendor teams
- Develop reporting on cloud security posture, open risks, remediation progress, and control maturity for security and technology leadership
Requirements
- Bachelor's degree in cyber security, computer science, engineering, information systems, or a relevant field, or equivalent professional experience
- 4–8 years of experience in information security, cloud security, infrastructure security, application security, or a related technical discipline
- Hands-on experience securing Microsoft Azure environments
- Ability to work independently in a lean team while coordinating across technology, vendor, risk, and business stakeholders
- Azure security architecture, Defender for Cloud, Azure Policy, logging, monitoring, and secure configuration practices
- Microsoft 365 security and compliance concepts, including Entra ID, Purview, Defender, and conditional access
- SaaS security administration for Salesforce, Box, and other enterprise cloud applications
- Static and dynamic application-security testing concepts, vulnerability triage, and secure SDLC practices
- SIEM integration patterns, alert tuning, security telemetry, and operational handoff to incident response teams
- Strong written communication skills for standards, procedures, exception documentation, and leadership reporting
- Applicants must be authorized to work in the United States without current or future employer-sponsored work authorization
- Microsoft Azure security certifications, CISSP, CCSP, or other relevant professional designations preferred
- Financial services or other regulated-industry experience preferred
Core Competencies
Demonstrates expertise in Azure Security Engineering, including secure configuration, logging, monitoring, and remediation. Proficient in implementing security baselines, managing SaaS security, and integrating security telemetry into SIEM workflows.
Highest-signal resume keywords
- Azure Security Engineering
- Microsoft Defender for Cloud
- SaaS Security Administration
- Static and Dynamic Application-Security Testing
- SIEM Integration
ATS Optimization Keywords
Hard Skills
- Azure Security Architecture
- Secure Configuration Practices
- Vulnerability Triage
- Cloud Control Hardening
- Logging
- Monitoring
- Secure SDLC Practices
- Operational Readiness
- Cloud Security Standards
- Exception Documentation
Soft Skills
- Strong Written Communication
- Independent Work
- Coordination Across Teams
Certifications & Qualifications
- Microsoft Azure Security Certifications
- CISSP
- CCSP
Industry Keywords
- Information Security
- Cloud Security
- Infrastructure Security
- Application Security
- Financial Services
Tools & Technologies
- Microsoft 365
- Salesforce
- Box
- Azure Policy
- Entra ID
- Purview