Senior Azure Cloud Security Engineer

Job Description

Location: Washington, DC Area

\n

Work Arrangement: Hybrid – 2 days onsite / 3 days remote, with the ability to transition to 5 days onsite if required by the client

\n

Job Type: Full-Time

About EastBay Systems\n

EastBay Systems is a cybersecurity and IT consulting firm supporting Federal civilian agencies. Our services include Cloud Security, AI Security, DevSecOps, Security Engineering, SOC Operations, GRC, and Continuous Monitoring.

About the Role\n

We are seeking a Senior Azure Cloud Security Engineer to join an established cybersecurity engineering team supporting a Federal hybrid-cloud environment.

\n

This is a hands-on technical role focused primarily on Microsoft Azure security, Microsoft Sentinel, Microsoft Defender, CrowdStrike, SIEM/SOAR, security automation, AI security, and daily operational troubleshooting .

\n

The ideal candidate has extensive experience supporting enterprise security platforms, integrating security technologies, troubleshooting complex issues, and improving cloud security operations. The position also includes DevSecOps and application security support for software development teams.

\n

You will work closely with cybersecurity engineers, SOC analysts, cloud administrators, software developers, and GRC teams to strengthen security across cloud infrastructure, applications, and AI-enabled services.

What You'll Do\n

Cloud Security Engineering

\n

\n
• Configure, maintain, troubleshoot, and optimize security solutions across Microsoft Azure and hybrid-cloud environments.
\n
• Provide daily engineering support for Microsoft Sentinel, Microsoft Defender, CrowdStrike , and related enterprise security platforms.
\n
• Manage and troubleshoot Microsoft Sentinel data connectors, analytics rules, log ingestion, workbooks, and monitoring configurations.
\n
• Develop and optimize advanced Kusto Query Language (KQL) queries for threat detection, investigations, security monitoring, and troubleshooting.
\n
• Implement, maintain, and troubleshoot SOAR workflows , including Azure Logic Apps, Sentinel playbooks, and automated incident response.
\n
• Configure and troubleshoot Syslog, CEF, Azure Monitor Agent (AMA), Data Collection Rules (DCRs) , and Linux/Windows log collection.
\n
• Integrate logs from firewalls, network devices, servers, cloud services, endpoints, and applications into enterprise security monitoring platforms.
\n
• Investigate and resolve operational issues involving failed connectors, missing logs, agent failures, data ingestion, and security automation.
\n
• Support Microsoft Defender for Endpoint, Defender for Cloud, Defender XDR, and related security capabilities.
\n
• Support Azure security configurations, networking, Microsoft Entra ID, Conditional Access, RBAC, PIM, and cloud security posture management.
\n
• Collaborate with SOC analysts and cybersecurity engineers to improve detection capabilities, security monitoring, and incident response.
\n
• Support vulnerability remediation, security hardening, and continuous monitoring in accordance with Federal cybersecurity requirements.
\n

\n

AI Security

\n

\n
• Support security monitoring and protection of AI-enabled applications, cloud-based AI services, and associated infrastructure.
\n
• Assist with securing Azure AI services and enterprise AI workloads, including identity, access controls, data protection, logging, and monitoring.
\n
• Integrate AI-related security events and telemetry with Microsoft Sentinel and enterprise monitoring platforms.
\n
• Collaborate with engineering, development, SOC, and GRC teams to identify AI-related threats, vulnerabilities, and security risks.
\n
• Support secure deployment and continuous monitoring of AI services in accordance with applicable Federal cybersecurity requirements.
\n

\n

DevSecOps and Application Security

\n

\n
• Provide security engineering support to software development teams and CI/CD environments.
\n
• Integrate and support application security testing, including SAST, DAST, SCA, secrets scanning, and container scanning.
\n
• Assist developers with application, API, dependency, and cloud security vulnerability remediation.
\n
• Support secure application deployments across Azure and AWS.
\n
• Implement application security logging and integration with Microsoft Sentinel.
\n
• Support secure application configurations, secrets management, and development environment security.
\n
• Collaborate with development and GRC teams to address application security and Federal compliance requirements.
\n

Required Qualifications\n

\n
• 7+ years of experience in cloud security engineering, cybersecurity engineering, or enterprise security operations engineering.
\n
• Strong hands-on Microsoft Azure security engineering experience , including configuration, maintenance, and troubleshooting.
\n
• Advanced Microsoft Sentinel and KQL expertise , including data connectors, analytics rules, log ingestion, detection engineering, and complex troubleshooting.
\n
• Hands-on SOAR experience developing and troubleshooting Azure Logic Apps, Sentinel playbooks, and security automation workflows.
\n
• Strong experience with Syslog, CEF, AMA, DCRs, and Linux/Windows log collection , including troubleshooting ingestion and connectivity issues.
\n
• Experience supporting Microsoft Defender security solutions and enterprise endpoint security platforms such as CrowdStrike.
\n
• Solid understanding of Azure networking, identity management, access controls, and cloud security configurations.
\n
• Experience troubleshooting security integrations, platform failures, and operational security issues.
\n
• Proficiency with PowerShell, Python, REST APIs, or similar scripting and automation technologies.
\n
• Working knowledge of DevSecOps practices, CI/CD security, and application vulnerability management.
\n
• Strong analytical, troubleshooting, and problem-solving skills with the ability to work independently.
\n
• Bachelor's degree in Computer Science, Engineering, Cybersecurity, Information Technology, or a related technical field.
\n
• Ability and willingness to work onsite 2 days per week and transition to 5 days onsite if required by the client.
\n

Preferred Qualifications\n

\n
• Experience securing Azure AI services, Azure OpenAI, or other enterprise AI platforms.
\n
• Familiarity with AI security risks, including prompt injection, sensitive data exposure, insecure integrations, and AI service misuse.
\n
• Knowledge of NIST AI Risk Management Framework and OWASP Top 10 for LLM Applications.
\n
• Experience with Azure DevOps, GitHub Actions, GitLab, or Jenkins.
\n
• Experience with Terraform, Infrastructure-as-Code, Docker, Kubernetes, or OpenShift.
\n
• AWS cloud security experience.
\n
• Experience supporting Federal cybersecurity environments and FISMA, NIST RMF, NIST SP 800-53, or FedRAMP requirements.
\n
• Microsoft security certifications such as SC-200 or AZ-500, or CISSP, CCSP, or equivalent certifications.
\n

Benefits\n

EastBay Systems offers a competitive benefits package for eligible full-time employees, including:

\n

\n
• Medical, dental, and vision insurance
\n
• Three weeks of paid time off
\n
• Paid Federal holidays
\n
• 401(k) retirement plan with employer contribution
\n
• Additional employer-sponsored benefits in accordance with company policy
\n

Equal Employment Opportunity\n

EastBay Systems is an Equal Opportunity Employer. Employment decisions are based on qualifications, merit, business needs, and job-related requirements.

\n

We do not discriminate on the basis of race, color, ethnicity, national origin, religion, sex, pregnancy, sexual orientation, gender identity or expression, age, disability, genetic information, protected veteran status, marital status, or any other characteristic protected by applicable Federal, state, or local law.