Senior Cloud Security Engineer

Job Description

Job Description

Senior Cloud Security Engineer

Company Overview

A global firm based in Los Angeles, California is seeking a Senior Cloud Security Engineer to strengthen its cybersecurity program across cloud, data, endpoint, identity, and enterprise environments. This is an opportunity to join a collaborative technology organization where security, risk management, and operational excellence are critical to the business.

Role Summary

The Senior Cloud Security Engineer will be a hands-on member of the Information Security team responsible for securing cloud infrastructure, enterprise data platforms, endpoints, identities, and business-critical systems. This role has a particular emphasis on Microsoft Azure security and will partner closely with data engineering and technology teams to secure modern cloud-based data environments. The ideal candidate combines strong cloud security architecture and engineering expertise with practical experience across security operations, incident response, vulnerability management, data protection, and risk management.

Key Responsibilities

• Serve as a security engineering resource for Microsoft Azure architecture, integrations, network security, identity, access controls, secrets management, and cloud security posture.
• Partner with data engineering teams to secure cloud-based data and analytics platforms through appropriate authentication, encryption, network controls, logging, and secrets management.
• Review security configurations and architecture for new cloud, application, and data platform integrations prior to production deployment.
• Monitor, investigate, and respond to security events involving cloud, endpoint, email, identity, data protection, and enterprise systems.
• Lead vulnerability identification, prioritization, remediation tracking, patch management, and cloud security configuration improvements.
• Support identity security initiatives including Microsoft Entra ID, conditional access, managed identities, least privilege, and identity governance.
• Develop and enhance cloud security monitoring, alerting, data protection, and incident response capabilities.
• Apply Infrastructure-as-Code practices to help automate, standardize, and enforce secure cloud configurations.
• Conduct security assessments and collaborate with technology vendors and managed security providers to identify and remediate risk.
• Support governance, risk, compliance, audit, business continuity, and disaster recovery activities across the organization.

Additional Details

• 3 days onsite, 2 days remote
• Hands-on security engineering role spanning cloud infrastructure, data platforms, security operations, and enterprise security
• Close collaboration with data engineering, IT, technology vendors, and managed security providers
• Opportunity to work across a broad cybersecurity technology stack within a highly regulated environment
• Candidates must be authorized to work in the United States

Required Qualifications

• 7+ years of experience across information security, security operations, systems engineering, systems administration, or related disciplines.
• Substantial hands-on experience securing Microsoft Azure environments from an architecture and integration perspective, including Entra ID, conditional access, managed identities, network security, private connectivity, key management, security posture management, and policy enforcement.
• Experience securing cloud-based data and analytics platforms from an infrastructure and security perspective, including access control, encryption, network security, secrets management, and audit logging.
• Hands-on experience investigating and responding to endpoint, email, identity, cloud, or data-related security events.
• Experience with vulnerability management, patch management, asset inventory, risk prioritization, and remediation tracking.
• Strong knowledge of Microsoft 365, Active Directory, Entra ID, Windows administration, PowerShell, and endpoint management.
• Familiarity with security and compliance frameworks such as CIS, SOC 2, PCI, NIST, CCPA, and GLBA.
• Strong analytical, troubleshooting, communication, and cross-functional collaboration skills.

Preferred Qualifications (Nice-to-Haves)

• Experience with Microsoft cloud security, SIEM, data governance, and threat protection solutions.
• Experience using Terraform, Bicep, ARM templates, or similar Infrastructure-as-Code technologies to enforce cloud security standards.
• Experience supporting Snowflake, Databricks, Dynamics, or comparable enterprise data platforms.
• Experience coordinating penetration tests, cloud security assessments, vendor risk reviews, and third-party due diligence.
• Knowledge of hybrid infrastructure, incident response, business continuity, disaster recovery, and audit support.
• Experience with enterprise endpoint detection, email security, managed detection, and data loss prevention technologies.
• Professional certifications such as CISSP, CISM, CISA, GIAC, Security+, Azure Security Engineer Associate, or equivalent credentials.

Compensation & Benefits

• $155,000 - $180,000 + discretionary bonus
• Comprehensive benefits package
• Paid time off and company holidays
• Professional development and career growth opportunities
• Collaborative, professional working environment