Cloud Security Specialist

Role Overview

Key Responsibilities

• Implement and manage Azure security controls, policies, and security best practices across cloud environments.
• Configure and operate Microsoft Defender for Cloud, Defender XDR, Defender for Endpoint, Defender for Servers, and Microsoft Sentinel.
• Manage security monitoring, incident investigation, analytics rules, workbooks, and response activities within Microsoft Sentinel.
• Implement identity and access security controls using Entra ID, RBAC, Conditional Access, and related Azure security services.
• Manage endpoint and device security controls using Microsoft Intune.
• Configure data protection, governance, and compliance controls using Microsoft Purview.
• Perform cloud security assessments, security posture reviews, vulnerability analysis, and remediation activities.
• Integrate Azure security solutions with SOC operations, threat detection processes, and incident response workflows.
• Support security audits and compliance reviews and maintain cloud security documentation.

Required Skills and Experience

• 6+ years of experience in cloud security.
• Strong hands-on experience with Microsoft Azure security services and cloud security operations.
• Experience managing Microsoft Defender XDR, Defender for Cloud, Microsoft Sentinel, Microsoft Intune, and Microsoft Purview.
• Strong understanding of Azure security architecture, the shared responsibility model, Entra ID, RBAC, and Conditional Access.
• Experience with cloud threat detection, incident response, security monitoring, and security posture management.
• Knowledge of cloud security best practices and enterprise security controls.
• CCSP, AZ-500, or an equivalent Azure security certification.

Preferred Skills

• Experience securing hybrid cloud environments integrating Azure with on-premise infrastructure.
• Knowledge of Azure Firewall, Network Security Groups, and Web Application Firewall.
• Experience with automation using PowerShell, Azure Functions, or Logic Apps.
• Familiarity with ISO 27001, NIST, CIS, and SOC 2 security frameworks.
• Experience integrating SIEM/SOAR platforms with cloud environments.
• Strong analytical, troubleshooting, and documentation skills.