Azure Cloud Security Engineer

Job Description

• Implement, configure, and manage CSPM capabilities to ensure continuous monitoring, risk assessment, and remediation of cloud infrastructure configurations.
• Review cloud infrastructure (AWS, Azure, GCP, etc.) for security misconfigurations and compliance violations against industry standards (e.g., CIS, NIST, SOC 2, PCI-DSS).
• Develop and enforce cloud security policies, controls, and best practices to enhance security posture and reduce the attack surface.
• Work with cloud architects and teams to integrate security controls throughout the cloud lifecycle, ensuring secure deployment and operation of cloud resources.
• Regularly assess and report on cloud security risks, vulnerabilities, and compliance status to leadership and other stakeholders.
• Implement and manage CWPP capabilities to secure cloud workloads, containers, and serverless applications across multiple public cloud platforms.
• Monitor workloads for vulnerabilities, security misconfigurations, and potential risks.
• Integrate workload protection security policies into CI/CD pipelines and cloud-native workflows.
• Automate vulnerability management, runtime security, and network defense for cloud workloads.
• Investigate, contain, and mitigate security incidents affecting cloud workloads.

Primary Skills

• Hands-on experience in cloud security, with specific expertise in CSPM, CWPP, and CASB solutions.
• Extensive experience with public cloud platforms (AWS, Azure, GCP) and understanding of cloud security architecture and configurations.
• Deep knowledge and hands-on experience with CSPM, CWPP, MCAS -Defender for Cloud & CASB modules.
• Strong understanding of cloud security frameworks, regulations, and best practices (e.g., CIS, NIST, SOC 2, PCI-DSS, HIPAA).
• Expertise in automating cloud security processes, integrating security into DevOps pipelines, and managing cloud workload protection (e.g., containers, serverless functions).
• Experience with identity and access management (IAM) systems and implementing security controls for cloud applications and data.
• Proficiency in security incident response, risk management, and vulnerability remediation within cloud environments.
• Strong scripting skills (e.g., Python, Terraform, Bash) for cloud security automation and integrations.

Secondary Skills

• Experience with Microsoft Defender for Cloud Apps (MCAS), DLP, and related data protection solutions.
• Security Certifications: CIPP/E, CIPT, CDPSE, CISSP
• Excellent communication and documentation skills