Cloud Security Engineer (Azure Security)

Capricorn; Sydney; Hybrid; AUD 140,000 - 190,000; Full time

Benefits offered by this job

Hybrid work

Training & development

Paid parental leave

Social events

Office gym nearby

Private health benefits

Job summary

Capricorn in Australia is seeking a Cloud Security Engineer to protect Azure platforms and workloads, focusing on governance, posture management and secure baselines.

You will implement policy baselines, Defender for Cloud, and workload protections across API Management, SQL, Storage and Key Vault, collaborating with stakeholders to balance risk and innovation. Hybrid role with opportunities to lead security improvements aligned with Essential Eight and ISO 27001:2022.

Qualifications

• Experience securing Azure cloud platforms, services and workloads.
• Experience developing and maintaining cloud governance controls and policy frameworks.
• Hands-on experience with CSPM/CNAPP or similar cloud security tooling.
• Experience securing cloud-native services (APIs, databases, storage, secrets).
• Strong IAM, PAM, logging, monitoring and network security capabilities.
• Proven ability to manage cloud security issues from investigation to remediation.

Responsibilities

• Protect Capricorn's Azure platforms and workloads with a focus on cloud security.
• Design, implement and improve Azure Policy baselines and workload protections.
• Collaborate with stakeholders to balance risk, usability and innovation.
• Strengthen cloud detection, response and assurance aligned with Essential Eight and ISO 27001:2022.

Skills

Azure security

Cloud governance

CSPM/CNAPP

Threat detection

Security tooling

Education

Cyber security degree

Tools

Azure Policy

Defender for Cloud

SIEM (Sentinel)

Job description

Capricorn is one of Australia and New Zealand's largest and most dynamic Member-owned organisations. Since 1974, we've provided our Members with financial and business solutions to make running a business easier. Our flagship Trade Account offers instant credit with over 1600 Preferred Suppliers, simplified monthly expenses, and a generous rewards program.

We have a strong foundation in the automotive and machinery aftermarkets. Our vibrant community includes over 31,000 Members across Australia and New Zealand, from national franchises to your local family workshop. Last year, Capricorn facilitated nearly $4bn in sales with our Preferred Suppliers.

At Capricorn, we're about more than just products and services. We work hard to ensure that our Members, Suppliers and People feel like they're part of something bigger: a Community which is connected and supported to make a difference, while having some fun along the way!

A little about the role

As our Cloud Security Engineer, you'll protect Capricorn's Azure platforms and workloads, with a clear focus on cloud infrastructure, applications, data services and platform security rather than end-user or device security.

You'll design, implement and improve Azure Policy baselines, Microsoft Defender for Cloud and workload protection controls across services including API Management, SQL, Storage and Key Vault. You'll take security outcomes from investigation and design through to remediation, documentation and steady-state operation.

Working closely with technology and business stakeholders, you'll balance risk, usability and innovation while strengthening cloud detection, response and assurance capabilities aligned with the Essential Eight maturity model and ISO 27001:2022.

What you'll bring

You're an experienced Azure cloud security engineer who can demonstrate hands-on ownership of cloud governance and workload protection in production environments. You can explain what you implemented, how you configured it and how you improved its ongoing effectiveness.

What's Essential

Experience securing cloud platforms, services and workloads, preferably in Microsoft Azure.

Demonstrated experience developing, implementing and maintaining cloud security governance controls, policy frameworks, configuration baselines or equivalent capabilities (e.g. Azure Policy, AWS Organizations/Config, GCP Organization Policies).

Strong hands-on experience with Cloud Security Posture Management (CSPM), Cloud Native Application Protection Platforms (CNAPP), or similar cloud governance and security tooling.

Experience securing cloud-native services such as API gateways, databases, storage platforms, secrets management services, and other managed cloud workloads.

Strong capability across cloud identity and access management, privileged access controls, secure configuration, logging, monitoring and network security.

Demonstrated expertise in vulnerability management, security operations, incident response and root cause analysis within cloud environments.

Proven ability to independently manage cloud security issues from investigation through implementation, documentation and operational support.

Practical knowledge of cyber security frameworks, risk management and security automation, including Essential Eight and ISO 27001:2022.

A willingness to learn and adapt to new cloud platforms, applying security knowledge and lessons learned across different cloud ecosystems.

Highly Regarded

Experience with Microsoft Azure and Microsoft Defender for Cloud.

Experience integrating cloud security findings with SIEM, SOAR, automation or workflow platforms such as Microsoft Sentinel, Logic Apps or comparable technologies.

Experience with cloud identity governance, privileged access management (PAM), identity and access management (IAM) governance, and enterprise-scale cloud security controls.

Qualifications

Industry-recognised cyber security certification demonstrating strong technical foundations and ongoing professional development is required, such as a Microsoft security, identity or Azure Security Engineer certification. A tertiary qualification in Cyber Security, Information Technology, Computer Science or a related discipline, or equivalent practical experience, is preferred. Senior-level certifications such as GIAC, CISSP, CISM or CRISC will be highly regarded.

A little on life at Capricorn

Joining our community is about more than just a job, so here's what's in it for you:

• Work flexibility - We're all unique, and so are the ways in which we work. We have Hybrid (2 days working from home) written into our policy.
• Development opportunities - Your success is ours too. We provide training opportunities and development to give you the tools you need to grow.
• Paid parental leave - During life's most important times, we support parents' leave for both parents and their transition back to work.
• Get social - Our social calendar is full, with a range of virtual and face-to-face events to keep us connected.
• A place you want to be - From sweeping city views and coffee on tap to the general buzz of our team, Capricorn is a place you want to be.
• A cherry on top - Enjoy benefits our team actually use, including reward and recognition, wellness initiatives, additional leave purchase and more.
• Amazing benefits - Access free gym membership near the office, discounted private health benefits and an all-inclusive working-from-home kit to get you started.

Sound like you'd be a good fit?

If you have deep Azure workload security experience and are ready to make a practical impact, we'd love to hear from you. We recognise that expertise can be gained in different ways, so if you meet most, but not all, of the criteria, we encourage you to apply.

For further information, support with your application and details on Capricorn, please visit capricorn.coop/careers