Senior Security Engineer – Cloud Security, Detection

This is a fully remote position, open to applicants in United States.

📋 Description

• Design, implement, and manage cloud security posture, data protection, and detection and response capabilities for clients.

• Lead extensive, multi-workstream security remediation projects.

• Address significant pools of unresolved cloud security issues and transition detection and data security capabilities from existing vendors to Microsoft platforms.

• Designate owners and closure timelines for cloud findings and assess current exemptions.

• Eliminate anonymous and public access from internet-facing cloud resources.

• Rotate and remove embedded secrets and deactivate shared-key access across storage accounts.

• Establish private link connectivity, network rules, network security group coverage, and managed identity standards.

• Direct diagnostic and platform logging into Microsoft Sentinel while overseeing ingestion scope and costs.

• Implement landing-zone guardrails as policy-as-code and review attack paths on a monthly basis.

• Triage and resolve high-severity security incidents with documented outcomes and evidence.

• Draft and disseminate incident response plans, severity matrices, escalation protocols, and definitions of incidents.

• Complete mail-flow, quarantine, and anti-impersonation configurations.

• Facilitate cross-functional responses during critical incidents.

• Define monitoring coverage and escalation protocols for out-of-hours, establish threat hunting, and conduct tabletop exercises.

• Create and refine Microsoft Sentinel analytics rules, watchlists, workbooks, data connectors, and detection coverage.

• Assess managed detection sourcing and transition detection platforms while simultaneously operating incumbent services.

• Design and implement automated and agentic response playbooks with scoped credentials and human approval for production containment.

• Decrease alert volume and mean time to resolution through tuning, automation, and suppression of false positives.

• Evaluate new tools and AI-driven detection and response capabilities.

• Design and manage pilot rings and staged rollouts for significant changes.

• Prepare, submit, and present change records that include risk assessments, blast radius, validation steps, and backout plans.

• Execute changes during planned maintenance windows, including evenings and weekends when necessary.

• Pause or delay unsafe rollouts and communicate schedule impacts to engagement leads and clients.

• Represent Fortellar effectively before client technical teams and executives, both in-person and virtually.

• Travel 10%–20% to client locations.

⛳️ Requirements

• Bachelor's degree in Computer Science, Information Security, or a related discipline.

• Preferred certifications include AZ-500, SC-200, SC-100, CCSP, or CISSP.

• Over 8 years of experience in infrastructure or security engineering, with at least 5 years focused on securing Azure environments.

• A minimum of 4 years of experience building and tuning Microsoft Sentinel detections using KQL, including Defender XDR and Defender for Cloud.

• Practical incident response experience, including leading responses to critical incidents.

• Proficiency in policy-as-code using Azure Policy, Terraform, or Bicep.

• Experience with Microsoft Purview and security automation utilizing Logic Apps or Sentinel playbooks.

• More than 3 years in a client-facing consulting role, engaging with technical and executive stakeholders.

• Proven record of managing high-risk changes through formal change management processes, including pilots, staged rollouts, and rollback plans.

• Must currently reside in and be authorized to work in the United States.

• Applications must be submitted from within the U.S.

🏝️ Benefits

• Competitive salary and performance-based incentives.

• Comprehensive health, dental, and vision insurance.

• Generous paid time off and holiday schedule.

• Opportunities for professional development and continuous learning.

• Flexible work arrangements and a supportive work environment.