Project Security Analyst

Pearson Whiffin IT & Digital; Maidstone; On-site; GBP 60,000 - 80,000; Full time

Job summary

A technology consulting firm in Maidstone is seeking a Project Security Analyst to enhance cloud security posture across various projects using Microsoft Azure. The ideal candidate will possess a strong cybersecurity background, experience with Azure security technologies, and excel in documentation and communication. Responsibilities include risk assessments, compliance implementation, and acting as a security SME in Azure projects. This role offers opportunities to influence security practices within the organization.

Qualifications

• Strong background in a Security Analyst or Cybersecurity project role.
• Hands-on experience with Azure security technologies.
• Strong understanding of cloud security best practices.

Responsibilities

• Support and enhance the cloud security posture across multiple projects.
• Act as the security SME in Azure-focused projects.
• Support audits and evidence collection for Azure resources.

Skills

Security Analyst background

Azure security technologies

Cloud security best practices

Infrastructure-as-code security

Documentation skills

Tools

Azure Active Directory

Microsoft Defender for Cloud

Azure Key Vault

Microsoft Sentinel

Job description

Project Security Analyst (Azure)

We are seeking a Project Security Analyst with expertise in Microsoft Azure to support and enhance the cloud security posture across multiple projects. You will work closely with project managers, cloud architects, DevOps teams, and security stakeholders to ensure Azure-based solutions meet enterprise security standards and compliance requirements, dealing with the following:

• Security Planning & Risk Assessment
  • Analyze and define security requirements for Azure-based projects.
  • Conduct threat modeling and risk assessments for cloud workloads.
  • Support the secure configuration of Azure services (e.g., Azure AD, Key Vault, Defender for Cloud).
• Project Delivery Support
  • Act as the security SME (Subject Matter Expert) in Azure-focused projects.
  • Ensure security milestones are integrated into project delivery timelines.
  • Review architectural diagrams and deployment plans from a security perspective.
• Compliance & Governance
  • Assist with the implementation of security policies and standards in Azure.
  • Ensure project deliverables meet compliance frameworks (e.g., ISO 27001, NIST, CIS, GDPR).
  • Support audits and evidence collection for Azure resources.

Required Skills & Experience

• Strong background in a Security Analyst or Cybersecurity project role.
• Hands-on experience with Azure security technologies, including:
  • Azure Active Directory (Azure AD)
  • Microsoft Defender for Cloud / Defender for Endpoint
  • Azure Key Vault
  • Azure Policy and Blueprints
  • Microsoft Sentinel
• Strong understanding of cloud security best practices and frameworks (e.g., Microsoft Cloud Adoption Framework, CIS Benchmarks for Azure).
• Experience with infrastructure-as-code (IaC) security (e.g., ARM templates, Bicep, Terraform).
• Excellent documentation, reporting, and stakeholder communication skills.