Cloud Security Engineer

Responsibilities:

Cloud Security Engineering & Operations

• Design, deploy, configure, and maintain Microsoft Purview, Defender for Cloud, Azure Log Analytics, Microsoft Entra ID, Privileged Identity Management (PIM), and Identity Governance.
• Engineer and continuously improve technical security controls across Microsoft 365 and Azure.
• Automate recurring security and compliance tasks to reduce manual effort and drift.
• Monitor security and compliance posture, driving continuous-improvement initiatives with measurable outcomes.

Data Protection & AI Governance

• Build, deploy, and maintain Data Loss Prevention (DLP) policies across the organization.
• Monitor AI technology usage and engineer controls to mitigate data exposure, information leakage, and inappropriate use.
• Assess emerging AI-related threats and implement governance and technical guardrails.
• Partner with internal teams to ensure sensitive data protection.

Threat Assessment & Security Reviews

• Apply a red-team mindset to proactively identify weaknesses in systems, configurations, processes, and controls.
• Conduct security reviews, exposure assessments, and control-effectiveness evaluations.
• Produce clear, concise reports for leadership covering findings, risk assessments, control gaps, and prioritized remediation recommendations.
• Track remediation and support stakeholders in implementing corrective actions.

Monitoring & Incident Support

• Use Azure Log Analytics and security tooling (e.g., KQL queries, alerting) to detect suspicious activity, trends, and compliance issues.
• Support security investigations and incident response, including analysis, containment, and remediation recommendations.
• Represent security and compliance in customer calls covering governance, data protection, and control topics.
• Support the compliance team on customer questionnaires, assessments, and security reviews.
• Communicate technical concepts effectively to both technical and non-technical audiences.