Cloud Security Engineer

This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for a Cloud Security Engineer based in United States.

This role will help protect and continuously strengthen the security posture of a large-scale cloud environment built around Microsoft Azure and Microsoft 365. You will work across cloud security engineering, threat detection, vulnerability management, secure configuration, and security governance. The position combines hands-on technical work with close collaboration across Cloud, Compliance, Information Security, and other internal teams. You will assess cloud resources, applications, containers, and identities to identify and reduce security risks before they become business-impacting issues. You will also contribute to incident investigations, audit readiness, customer security assessments, and the continuous improvement of security controls and monitoring capabilities. This is an opportunity to work with modern cloud security technologies while helping establish resilient, well-governed, and secure cloud operations.

Accountabilities

• Design, implement, and continuously improve security controls and configuration baselines across Microsoft Azure and Microsoft 365 in alignment with recognized security standards and frameworks.
• Configure, administer, and optimize cloud security technologies including Microsoft Defender for Cloud, Microsoft Defender for Endpoint, Microsoft Defender for Cloud Apps, and related solutions.
• Conduct security assessments of cloud resources, applications, Azure Kubernetes Service (AKS), and containerized workloads to identify vulnerabilities, misconfigurations, excessive permissions, and other security risks.
• Manage vulnerability remediation activities by prioritizing findings, coordinating corrective actions, and validating that identified issues have been properly resolved.
• Configure and enhance cloud security monitoring, threat detection, investigation, response, and automation using Microsoft Sentinel, Kusto Query Language (KQL), and related technologies.
• Partner with Cloud, Compliance, and other cross-functional teams to ensure cloud services are securely designed, deployed, maintained, and hardened according to organizational and industry standards such as CIS Benchmarks and DISA STIGs.
• Respond to customer security inquiries, assessments, and questionnaires by gathering, validating, and clearly communicating information about security controls, technologies, and practices.
• Develop and maintain technical documentation, procedures, dashboards, alerts, and security reporting to strengthen visibility and operational effectiveness.
• Support internal and external audits by gathering evidence, validating control adherence, and demonstrating compliance with organizational, customer, and regulatory requirements.
• Participate in cloud security incident response by investigating suspicious, anomalous, or unauthorized activity and supporting broader security investigations.
• Continuously identify opportunities to improve cloud security processes, controls, automation, and operational resilience.

Requirements

• Bachelor’s degree in Cybersecurity, Computer Science, Engineering, or a related technology field, or equivalent professional experience.
• At least 3 years of experience securing cloud-based infrastructure, services, and technologies.
• Demonstrated ability to identify, assess, and mitigate security risks within cloud environments.
• Practical experience securing Microsoft Azure through secure configuration, least-privilege access, data protection, threat detection and response, and security hardening.
• Experience deploying, administering, and using security technologies such as Microsoft Defender, SIEM, CASB, vulnerability management platforms, and related security solutions.
• Working knowledge of Azure Log Analytics, Kusto Query Language (KQL), PowerShell, Bash, and REST APIs.
• Understanding of identity and access management concepts, including Microsoft Entra ID, RBAC, authentication, authorization, and least-privilege access.
• Working knowledge of Windows and Linux operating systems.
• Familiarity with incident response, incident management, and change management processes.
• Strong analytical, troubleshooting, and problem-solving capabilities.
• Excellent written, verbal, and presentation skills, with the ability to communicate technical concepts to both technical and non-technical stakeholders.
• Strong organizational and prioritization skills, with the ability to manage competing priorities in a fast-paced environment.
• Demonstrated initiative, accountability, attention to detail, adaptability, and commitment to continuous learning.
• Experience with a Cloud Service Provider, Managed Service Provider, SaaS provider, or similarly regulated cloud environment is preferred.
• 5+ years of Microsoft Azure experience, particularly securing cloud-native technologies, AKS, and containerized workloads, is a plus.
• Knowledge of security and compliance frameworks such as NIST 800-53, FedRAMP, SOC 1, SOC 2, or ISO 27001 is advantageous.
• Familiarity with IAM technologies and protocols such as Okta, SAML, OAuth, and OpenID Connect (OIDC) is preferred.
• Experience with Infrastructure as Code and deployment technologies such as ARM, Bicep, Terraform, and Azure DevOps pipelines is a plus.
• Working knowledge of network security principles, TCP/IP, DNS, TLS, and firewall technologies is advantageous.
• Familiarity with Agile, Scrum, and DevSecOps methodologies is preferred.
• Relevant cybersecurity certifications such as AZ-500, AZ-104, SC-200, SC-300, SC-100, Security+, Cloud+, or equivalent are beneficial.
• Candidates must be legally authorized to work in the United States without requiring employment sponsorship.

Benefits

• Competitive annual base salary of $86,000–$112,000 , with additional variable compensation and benefits potentially available based on experience, skills, and location.
• Comprehensive medical insurance.
• Dental and vision insurance.
• Life insurance.
• Short- and long-term disability coverage.
• 401(k) retirement plan.
• Paid vacation and holidays.
• Professional development and continuing learning opportunities.
• Multiple training opportunities to support technical and career growth.
• Exposure to varied cloud security projects and modern cybersecurity technologies.
• Collaborative culture focused on customer success, transparency, and strong team relationships.
• Remote working opportunity within the United States.

How Jobgether works:

We use an AI-powered matching process to ensure your application is reviewed quickly, objectively, and fairly against the role's core requirements. Our system identifies the top-fitting candidates, and this shortlist is then shared directly with the hiring company. The final decision and next steps (interviews, assessments) are managed by their internal team.

We appreciate your interest and wish you the best!

Data Privacy Notice: By submitting your application, you acknowledge that Jobgether will process your personal data to evaluate your candidacy and share relevant information with the hiring employer. This processing is based on legitimate interest and pre-contractual measures under applicable data protection laws (including GDPR). You may exercise your rights (access, rectification, erasure, objection) at any time.

#LI-CL1

We may use artificial intelligence (AI) tools to support parts of the hiring process, such as reviewing applications, analyzing resumes, or assessing responses and identifying potential inconsistencies or verification signals in application materials based on available information. These tools assist our recruitment team but do not replace human judgment. Final hiring decisions are ultimately made by humans. If you would like more information about how your data is processed, please contact us.