Cloud Security Engineer

• Job Summary

The Cloud Security Specialist is responsible for supporting the implementation, operation, and continuous improvement of cloud security controls to protect the organization's cloud infrastructure, applications, and data. The role works closely with the Technology Security Manager, Cloud, Infrastructure, SOC, and GRC teams to identify security risks, strengthen security controls, monitor cloud security posture, and support compliance with security standards and regulatory requirements.

The successful candidate will play a key role in securing cloud environments, supporting incident response activities, managing identity and access controls, and promoting cloud security best practices across the organization.

• Job Description

Cloud Security Operations

• Support the implementation and management of security controls across cloud platforms, including Microsoft Azure, AWS, Oracle Cloud, and Google Cloud.
• Apply cloud security baselines, hardening standards, and secure configuration practices.
• Monitor cloud environments to identify vulnerabilities, risks, and misconfigurations.
• Support threat assessments and cloud security risk remediation activities.

Identity & Access Management (IAM)

• Support cloud identity and access management activities using Microsoft Entra ID (Azure AD) and other IAM solutions.
• Review user access, privileged accounts, and role assignments.
• Assist in implementing security controls such as MFA, Conditional Access, and Privileged Identity Management (PIM).

Security Monitoring & Incident Response

• Monitor cloud security alerts and investigate potential security incidents.
• Support cloud security incident response, containment, and remediation activities.
• Conduct root cause analysis and assist in implementing corrective actions.
• Support vulnerability management and remediation tracking.

Governance, Risk & Compliance

• Support compliance with security standards and frameworks including ISO 27001, NIST, CIS Benchmarks, GDPR, SOC 2, and PCI DSS.
• Participate in cloud security audits, assessments, and compliance reviews.
• Maintain cloud security documentation, reports, policies, and procedures.
• Monitor cloud security posture and recommend security improvements.

Cloud Security Tools & Collaboration

• Support and administer cloud security solutions such as Microsoft Defender for Cloud, Microsoft Sentinel, SIEM, CSPM, and CASB technologies.
• Assist in cloud security automation and reporting initiatives.
• Collaborate with Security, Infrastructure, Networking, Cloud, and DevOps teams to improve cloud security maturity.
• Promote cloud security awareness and best practices across the organization.

Job Specification

Education

• Bachelor's Degree in Computer Science, Information Technology, Cybersecurity, Information Security, or a related field.

Experience

• 3-5 years of experience in Cybersecurity, Cloud Security, Infrastructure Security, or a related field.
• Minimum 1-2 years of hands-on experience with Microsoft Azure (preferred) or other major cloud platforms.
• Experience in security monitoring, incident response, vulnerability management, and cloud security operations.
• Experience working with Infrastructure, Networking, Security Operations, or Cloud teams.

Technical Skills

• Microsoft Azure Security
• Cloud Security
• Identity & Access Management (IAM)
• Microsoft Entra ID (Azure AD)
• Microsoft Defender for Cloud
• Microsoft Sentinel
• Vulnerability Management
• SIEM & Security Monitoring
• Network Security
• Data Protection & Encryption
• Cloud Governance & Compliance
• Risk Assessment
• Zero Trust Security
• CSPM Solutions
• Security Automation
• PowerShell or Python Scripting

Preferred Certifications

• Microsoft Certified: Azure Security Engineer Associate (AZ-500)
• Microsoft Certified: Azure Administrator Associate (AZ-104)
• CompTIA Security+
• Microsoft Security Operations Analyst (SC-200)
• Microsoft Identity and Access Administrator (SC-300)
• CCSP (Preferred)

Behavioral Competencies

• Strong analytical and problem-solving skills.
• Effective communication and stakeholder management.
• High level of integrity and accountability.
• Attention to detail and risk awareness.
• Ability to manage multiple priorities and deadlines.
• Collaborative and continuous improvement mindset.