Azure Cloud Security Operations Specialist

CPX; Abu Dhabi; On-site; AED 120,000 - 170,000; Full time

Job summary

CPX seeks a Cloud Security Operations professional to monitor alerts, run security posture checks and coordinate containment actions across Defender for Cloud, Defender XDR and Sentinel. You will review CSPM findings, triage incidents and drive remediation with ITSM integration.

Requires 5+ years in security operations and Azure/M365 security, with relevant certifications. Some after-hours client-site support may be required.

Qualifications

• 5+ years in security operations or cloud security.
• 2+ years in Azure/Microsoft 365 security.
• Bachelor's degree in CS/IT/Engineering.
• Relevant certifications (AZ-500, SC-200, CCSP).
• Strong communication and client-site availability.

Responsibilities

• Monitor cloud security alerts, posture, and workload protection.
• Operate Defender for Cloud, Defender XDR, Sentinel and related capabilities.
• Review Secure Score and CSPM/CNAPP findings and validate context.
• Triage incidents and coordinate containment actions.
• Track misconfigurations, vulnerabilities, and permissions to closure.
• Support onboarding of subscriptions, workloads and connectors.
• Review service principals, identities and privileged roles.
• Monitor Defender coverage for VM, containers, storage, SQL, Key Vault.
• Integrate cloud alerts with SIEM/SOAR and ITSM workflows.
• Produce dashboards and runbooks; follow incident and change processes.

Skills

Cloud security operations

Azure security

Incident triage

Automation (KQL/PowerShell)

ITSM coordination

Education

Bachelor's in Computer Science / IT / Engineering

Postgraduate information security (advantage)

Tools

Microsoft Defender for Cloud

Defender XDR

Microsoft Sentinel

SIEM/SOAR

Kubernetes security monitoring

Job description

CPX seeks a Cloud Security Operations professional to monitor alerts, run security posture checks and coordinate containment actions across Defender for Cloud, Defender XDR and Sentinel. You will review CSPM findings, triage incidents and drive remediation with ITSM integration.

Requires 5+ years in security operations and Azure/M365 security, with relevant certifications. Some after-hours client-site support may be required.