Security Consulting Engineer

Role overview

Cloud security

• Maintain controls across Azure virtual networks, network security groups, private endpoints, and Azure Firewall.
• Manage firewall policies, FQDN allow-listing, and network egress controls.
• Monitor for cloud misconfigurations, threats, and compliance issues using Microsoft Defender for Cloud; assess risks and document architecture.
• Implement DDoS protection and WAF policies using Azure Front Door or Application Gateway.

Application security and DevSecOps

• Review web applications and APIs for authentication, authorization, business logic, injection, SSRF, and OWASP Top 10 issues.
• Conduct threat modeling and secure design reviews; define secure coding standards and developer guidance.
• Review API and microservice designs for authentication, input validation, and data exposure risks.
• Integrate SAST, DAST, SCA, and secrets detection into CI/CD pipelines; secure Azure Container Apps and automate security checks.
• Manage vulnerability remediation and assess risks across pipelines, repositories, and deployment environments.

SaaS security and operations

• Govern Zoho One security and access, permissions, data sharing, audit logs, MFA, IP restrictions, and session controls.
• Assess third-party integrations and webhooks; maintain a SaaS inventory, conduct access reviews, and security-review new tools.
• Operate and tune SIEM for cloud and SaaS logs, alerts, and incident response.
• Lead security incident response; maintain policies, runbooks, and compliance documentation; coordinate vulnerability assessments and penetration testing.

Required experience

• At least 8 years of hands-on cloud, application, or information security experience.
• Experience securing production environments across multiple cloud providers.
• Hands-on application security assessments, CI/CD security-tool integration, and Zoho or equivalent enterprise SaaS administration.
• Experience with SIEM platforms, log analysis, and incident response.

Technical skills

• Azure security services include Defender for Cloud, Azure Firewall, Front Door, and Key Vault.
• Application security includes OWASP Top 10, Burp Suite, API testing, and secure code review.
• CI/CD tooling may include GitHub Actions, Jenkins, or GitLab CI; security tools include SonarQube, Snyk, Trivy, and Checkov.
• Container security includes Docker image scanning and managed container platforms such as Azure Container Apps.
• SIEM includes Microsoft Sentinel or an equivalent; scripting options include Python, Bash, PowerShell, or Terraform.
• Security frameworks include OWASP, NIST, CIS Benchmarks, and Zero Trust; Zoho One security administration is relevant.

Desired qualifications

• AZ-500, CCSP, or equivalent certification.
• Experience with Zoho Creator, Zoho Analytics, or securing custom Zoho integrations.
• Familiarity with Kubernetes/AKS security, compliance frameworks, red-team or penetration testing, or Terraform security scanning.