Job Title: Cloud Security Engineer (Azure)
Overview
The Cloud Security Engineer (Azure) plays a critical role in safeguarding the organization’s cloud environments on the Microsoft Azure platform. As more companies migrate their data and applications to the cloud, the need for skilled professionals who can identify vulnerabilities and implement security measures has grown significantly. This role is essential not only for protecting sensitive information but also for ensuring compliance with regulations and standards. The Cloud Security Engineer will collaborate closely with cross-functional teams to design and implement security protocols, monitor cloud infrastructure, and investigate security incidents. With an emphasis on proactive security, this position will also involve regular assessments of the cloud environment to identify potential risks and ensure that security best practices are being followed. The ideal candidate will possess a robust understanding of cloud infrastructure, security frameworks, and incident response strategies, and will play a key role in shaping the organization’s cloud security strategy.
Key Responsibilities
- Design and implement security architecture for Azure cloud services.
- Conduct risk assessments and vulnerability assessments on cloud environments.
- Develop and enforce cloud security policies and procedures.
- Monitor cloud environments for security threats and anomalies.
- Respond to security incidents and conduct forensic investigations.
- Collaborate with DevOps teams to integrate security into the DevSecOps pipeline.
- Manage identity and access controls in Azure Active Directory.
- Implement encryption standards and practices for cloud data.
- Stay updated on the latest cloud security trends and technologies.
- Ensure compliance with industry regulations (GDPR, HIPAA, etc.).
- Provide security training and awareness programs for staff.
- Regularly review security logs and reports for anomalies.
- Work with third-party vendors to assess their security posture.
- Document security incidents and corresponding responses.
- Assist in the development of disaster recovery and business continuity plans.
Required Qualifications
- Bachelor’s degree in Computer Science, Information Technology, or a related field.
- 5+ years of experience in cloud security engineering or a related field.
- Strong understanding of Microsoft Azure services and security features. (SecUPI preferable)
- Experience with network security principles and practices.
- Knowledge of security compliance standards such as ISO 27001, NIST, CIS.
- Familiarity with security monitoring and incident response tools.
- Hands-on experience with security automation and scripting.
- Strong analytical and problem-solving skills.
- Certifications such as Azure Security Engineer Associate, Certified Information Systems Security Professional (CISSP), or similar are preferred.
- Excellent written and verbal communication skills.
- Ability to work independently and in team settings.
- Experience with DevOps methodologies and practices.
- Understanding of cloud infrastructure management tools.
- Ability to collaborate with technical and non-technical stakeholders.
- Willingness to stay current with evolving security threats.
Skills: compliance standards,kubernetes,communication skills,security policies,security monitoring,automation and scripting,devsecops,cloud security,risk assessments,vulnerability assessments,devops,identity and access management,azure,security architecture,incident response,analytical skills,encryption standards
