Azure Security Engineer (ID: 4026)

As an Azure Security Engineer, you will: Design, implement, and manage security controls across Azure subscriptions, resource groups, and cloud workloads. Configure and manage Microsoft Defender for Cloud for threat protection, security posture management, and risk remediation. Implement Azure network security controls including NSGs, Azure Firewall, WAF, DDoS Protection, VPN, and ExpressRoute security. Manage identity and access security using Microsoft Entra ID, including Conditional Access, MFA, PIM, and RBAC. Configure and manage Azure Key Vault for secrets, certificates, and encryption key management. Monitor security events and respond to incidents using Microsoft Defender and Microsoft Sentinel. Conduct security assessments, vulnerability scans, risk analysis, and remediation activities. Implement and enforce Azure Policy and governance controls to support security and compliance requirements. Perform log analysis and security monitoring using Azure Monitor and Log Analytics. Integrate security controls into CI/CD pipelines and support DevSecOps practices, including SAST and DAST scanning. Secure Infrastructure as Code environments using Terraform, ARM, and Bicep security practices. Prepare security documentation, audit evidence, compliance reports, and risk assessments. Collaborate with platform, DevOps, and compliance teams to embed security best practices into Azure architecture. Stay current with emerging Azure security features, cloud threats, vulnerabilities, and security best practices. What You Bring to the Table: 6+ years of overall IT experience, with 3+ years of hands-on experience in Azure/Cloud Security. Strong hands-on experience with Microsoft Azure security architecture and cloud security controls. Proven experience with Microsoft Defender for Cloud and Microsoft Sentinel. Strong knowledge of Microsoft Entra ID, including Conditional Access, MFA, PIM, and RBAC. Hands-on experience with Azure network security services such as NSGs, Azure Firewall, WAF, DDoS Protection, VPN, and ExpressRoute. Proficiency in Azure Key Vault for secrets, certificates, and encryption key management. Strong understanding of Azure Policy, governance, security baselines, and compliance controls. Clear understanding of Infrastructure as Code (IaC) and security scanning for Terraform, ARM, and Bicep. Experience with vulnerability management, security assessments, and risk remediation. Familiarity with DevSecOps and integrating security tools into CI/CD pipelines. Scripting capabilities using PowerShell, Python, or Bash for security automation. Knowledge of security and compliance frameworks such as ISO 27001, SOC 2, NIST, GDPR, or HIPAA. Strong understanding of cloud threat detection, incident response, monitoring, and security operations. You should possess the ability to: Analyze Azure security risks and recommend appropriate controls and remediation measures. Troubleshoot complex cloud security, identity, networking, and access-related issues. Detect, investigate, and respond effectively to security incidents and threats. Translate security requirements into practical Azure architecture and implementation controls. Automate security tasks and processes using PowerShell, Python, or Bash. Embed security practices throughout CI/CD and DevSecOps processes. Assess IaC configurations and identify security misconfigurations before deployment. Interpret security logs and identify suspicious activities using Azure Monitor, Log Analytics, Defender, and Sentinel. Apply security governance and compliance requirements consistently across Azure environments. Communicate security risks clearly to both technical and non-technical stakeholders. Work effectively with platform, DevOps, engineering, and compliance teams. What We Bring to the Table: Opportunity to work on enterprise-scale Azure security environments and cloud workloads. Exposure to a broad range of Microsoft Azure security technologies and services. Opportunity to work across cloud security, identity, networking, governance, and DevSecOps domains. Hands-on involvement with modern security platforms such as Microsoft Defender for Cloud and Microsoft Sentinel. Exposure to enterprise identity and access management using Microsoft Entra ID. Opportunities to strengthen expertise in Azure security architecture and cloud governance. Let’s Connect Want to discuss this opportunity in more detail? Feel free to reach out. Recruiter: Aswin Dhanvandhar Phone: +31 20 369 0609 ; Extn :141 Email: aswin.d@stafide.nl LinkedIn: https://www.linkedin.com/in/aswin-dhanvandhar/