Information Security Engineer (Cloud) - Contract

Role overview

What you will do

• Monitor CSPM tooling to identify high-priority misconfigurations, network exposures, and combined risks across AWS and Azure.
• Improve Microsoft Secure Score and configuration across Entra ID, Defender, and Purview.
• Partner with technical teams to turn posture findings into remediation tasks, track timelines, and verify fixes.
• Maintain cloud hardening baselines, data boundaries, security guardrails, and Microsoft 365 Copilot sensitivity and permission controls.
• Triage security requests, access exceptions, and technical risk inquiries; assess vendors, cloud architectures, and third-party SaaS integrations.
• Review infrastructure and IT change requests for security impacts, perimeter exposure, and identity and access risks.
• Document risks and exceptions and establish practical compensating controls and operating procedures with system owners.
• Prioritize vulnerabilities, assign remediation tasks, validate patches, administer security tools, and support security operations.
• Maintain runbooks, guidelines, and triage procedures; assist with alerts, investigations, and incident follow-ups.

What you have

• 3+ years of hands-on experience in cybersecurity, cloud security analysis, vulnerability management, or security operations.
• Direct operational experience with Microsoft 365 security portals, including Entra ID, Microsoft Defender, and Purview.
• Practical familiarity with AWS and/or Azure security principles, including IAM, security groups, and resource hardening.
• Experience with request intake, risk exceptions, SOPs, runbooks, and process documentation.
• Ability to collaborate with technical teams to facilitate and track remediation.
• Working understanding of CSPM and SaaS security hygiene; familiarity with MFA, Conditional Access, and least-privilege RBAC.
• Understanding of technical risk assessments, IT change management, ticketing workflows, and data protection for AI productivity tools.