Cloud Security Engineer

This is a fully remote position, open to applicants in Alabama, +40 more states.

📋 Description

• Design, implement, configure, and oversee Microsoft cloud security and compliance technologies, including Microsoft Purview, Microsoft Defender for Cloud, Azure Log Analytics, Microsoft Entra ID, Privileged Identity Management, Identity Governance, and DLP.

• Develop and enhance technical security controls continuously across Microsoft 365 and Azure.

• Automate repetitive security and compliance activities to minimize manual effort and reduce drift.

• Monitor security and compliance status and lead continuous improvement initiatives with measurable results.

• Create, implement, and maintain Data Loss Prevention policies.

• Oversee AI technology utilization and develop controls to prevent data exposure, information leaks, and misuse.

• Evaluate emerging AI-related threats and establish governance and technical safeguards.

• Collaborate with internal teams to safeguard sensitive information.

• Identify vulnerabilities in systems, configurations, processes, and controls using a red-team approach.

• Conduct security audits, exposure assessments, and evaluations of control effectiveness.

• Generate reports for leadership that detail findings, risk assessments, control deficiencies, and prioritized recommendations for remediation.

• Monitor remediation efforts and assist stakeholders in executing corrective actions.

• Utilize Azure Log Analytics and security tools, including KQL queries and alerting, to identify suspicious activities, trends, and compliance issues.

• Support security investigations and incident response, including analysis, containment, and recommendations for remediation.

• Represent security and compliance during customer discussions on governance, data protection, and control matters.

• Assist the compliance team with customer questionnaires, assessments, and security reviews.

• Articulate technical concepts to both technical and non-technical audiences.

⛳️ Requirements

• Over 7 years of practical experience in engineering and operating Microsoft cloud security technologies: Purview, Defender for Cloud, Azure Log Analytics, Entra ID, PIM, Identity Governance, and DLP.

• Strong understanding of cloud security principles and Microsoft 365 / Azure security controls.

• Experience in investigating security threats and identifying weaknesses in controls.

• Proficiency in writing queries such as KQL and automating tasks with PowerShell, Graph API, or similar tools is highly advantageous.

• Willingness and capability to travel; travel to customer locations may be necessary.

• Strong analytical and problem-solving abilities, with a mindset to consider an attacker's perspective.

• Exceptional written communication skills and the ability to produce professional reports and executive summaries.

• Strong presentation and communication skills with customers.

• Ability to work autonomously in a remote environment while collaborating with distributed teams.

• Microsoft security certifications such as SC-200, SC-300, SC-400, AZ-500, or equivalent are preferred.

• Familiarity with compliance frameworks such as ISO 27001, SOC 2, GDPR, or similar is advantageous.

• Experience with governance, risk, and compliance (GRC) programs is a plus.

• Exposure to AI governance, security, or responsible-AI initiatives is beneficial.

• Experience as a consultant with Configuration Manager, Intune, and related technologies is a plus.

• Experience leading customer-oriented workshops is a plus.

🏝️ Benefits

• 401k match: 200% of contributions up to the first 5% of salary, leading to a total potential match of 10%.

• Comprehensive medical, dental, and vision coverage; Patch My PC covers 99% of premiums for team members and their dependents.

• FSA/HSA options available.

• Fertility assistance benefits.

• Parental leave offered.

• Paid time off (PTO) provided.

• Volunteer leave available.

• Charitable donation matching program.

• Tuition reimbursement offered.

• Gym membership reimbursement.

• Internet stipend included.

• Pet insurance available.

• Fully remote work environment.