Azure Security Engineer (ID: 4026)

Zohorecruit; Amsterdam; On-site; EUR 90,000 - 130,000; Full time

Job summary

Zohorecruit is seeking an experienced Azure Security Engineer to design and implement security controls across Azure environments. You will manage Defender for Cloud, Entra ID, and network security services to protect cloud workloads and data.

Responsibilities include threat monitoring with Defender and Sentinel, vulnerability assessments, and embedding security into CI/CD pipelines using Terraform, ARM, and Bicep. A strong IAM and governance mindset is essential.

Qualifications

• 6+ years IT experience with 3+ years in Azure security.
• Hands-on experience with Azure security architecture and cloud controls.
• Proven experience with Defender for Cloud and Sentinel.
• Strong knowledge of Entra ID (IAM, CA, MFA, PIM, RBAC).
• Experience with Azure network security services such as NSGs, Azure Firewall, WAF, DDoS Protection, VPN, ExpressRoute.
• IaC security using Terraform, ARM, and Bicep.
• Familiarity with security frameworks ISO 27001, SOC 2, NIST, GDPR.
• Scripting in PowerShell, Python, or Bash for automation.

Responsibilities

• Design, implement, and manage security controls across Azure subscriptions.
• Configure Defender for Cloud for threat protection and posture management.
• Manage network security: NSG, Firewall, WAF, DDoS, VPN/ExpressRoute.
• Monitor security events with Defender and Sentinel; respond to incidents.
• Conduct risk assessments, vulnerability scans, remediation.
• Embed security into CI/CD pipelines; implement SAST/DAST.
• Secure IaC environments using Terraform, ARM, and Bicep.
• Prepare security docs, audit evidence, and compliance reports.

Skills

Azure security

Defender for Cloud

Entra ID

RBAC

PIM

MFA

Terraform

Bicep

ARM templates

PowerShell

Python

CI/CD security

DevSecOps

Log Analytics

Azure Monitor

ISO 27001

NIST

GDPR

Tools

Terraform

ARM

Bicep

Azure Monitor

Sentinel

WAF

NSG

Job description

As an Azure Security Engineer, you will:

• Design, implement, and manage security controls across Azure subscriptions, resource groups, and cloud workloads.
  
• Configure and manage Microsoft Defender for Cloud for threat protection, security posture management, and risk remediation.
• Implement Azure network security controls including NSGs, Azure Firewall, WAF, DDoS Protection, VPN, and ExpressRoute security.
• Manage identity and access security using Microsoft Entra ID, including Conditional Access, MFA, PIM, and RBAC.
• Configure and manage Azure Key Vault for secrets, certificates, and encryption key management.
• Monitor security events and respond to incidents using Microsoft Defender and Microsoft Sentinel.
• Conduct security assessments, vulnerability scans, risk analysis, and remediation activities.
• Implement and enforce Azure Policy and governance controls to support security and compliance requirements.
• Perform log analysis and security monitoring using Azure Monitor and Log Analytics.
• Integrate security controls into CI/CD pipelines and support DevSecOps practices, including SAST and DAST scanning.
• Secure Infrastructure as Code environments using Terraform, ARM, and Bicep security practices.
• Prepare security documentation, audit evidence, compliance reports, and risk assessments.
• Collaborate with platform, DevOps, and compliance teams to embed security best practices into Azure architecture.
• Stay current with emerging Azure security features, cloud threats, vulnerabilities, and security best practices.

What You Bring to the Table:

• 6+ years of overall IT experience, with 3+ years of hands‑on experience in Azure/Cloud Security.
  
• Strong hands‑on experience with Microsoft Azure security architecture and cloud security controls.
• Proven experience with Microsoft Defender for Cloud and Microsoft Sentinel.
• Strong knowledge of Microsoft Entra ID, including Conditional Access, MFA, PIM, and RBAC.
• Hands‑on experience with Azure network security services such as NSGs, Azure Firewall, WAF, DDoS Protection, VPN, and ExpressRoute.
• Proficiency in Azure Key Vault for secrets, certificates, and encryption key management.
• Strong understanding of Azure Policy, governance, security baselines, and compliance controls.
• Clear understanding of Infrastructure as Code (IaC) and security scanning for Terraform, ARM, and Bicep.
• Experience with vulnerability management, security assessments, and risk remediation.
• Familiarity with DevSecOps and integrating security tools into CI/CD pipelines.
• Scripting capabilities using PowerShell, Python, or Bash for security automation.
• Knowledge of security and compliance frameworks such as ISO 27001, SOC 2, NIST, GDPR, or HIPAA.
• Strong understanding of cloud threat detection, incident response, monitoring, and security operations.

You should possess the ability to:

• Analyze Azure security risks and recommend appropriate controls and remediation measures.
  
• Troubleshoot complex cloud security, identity, networking, and access‑related issues.
• Detect, investigate, and respond effectively to security incidents and threats.
• Translate security requirements into practical Azure architecture and implementation controls.
• Automate security tasks and processes using PowerShell, Python, or Bash.
• Embed security practices throughout CI/CD and DevSecOps processes.
• Assess IaC configurations and identify security misconfigurations before deployment.
• Interpret security logs and identify suspicious activities using Azure Monitor, Log Analytics, Defender, and Sentinel.
• Apply security governance and compliance requirements consistently across Azure environments.
• Communicate security risks clearly to both technical and non‑technical stakeholders.
• Work effectively with platform, DevOps, engineering, and compliance teams.

What We Bring to the Table:

• Opportunity to work on enterprise‑scale Azure security environments and cloud workloads.
  
• Exposure to a broad range of Microsoft Azure security technologies and services.
• Opportunity to work across cloud security, identity, networking, governance, and DevSecOps domains.
• Hands‑on involvement with modern security platforms such as Microsoft Defender for Cloud and Microsoft Sentinel.
• Exposure to enterprise identity and access management using Microsoft Entra ID.
• Opportunities to strengthen expertise in Azure security architecture and cloud governance.

Let’s Connect

Want to discuss this opportunity in more detail? Feel free to reach out.