Cloud Security Engineer: Azure & Entra Identity Lead

Search X Recruitment; Rotterdam; Hybrid; EUR 77,000 - 94,000; Full time

Benefits offered by this job

Annual bonus

Hybrid work

28 vacation days

Health insurance

Job summary

Search X Recruitment is seeking a Cloud Security Engineer to own the security posture of our Azure and Entra ID environment. You will harden the cloud estate with Defender for Cloud, Azure Policy, and secure landing zones, while managing identity and access within Entra ID, Conditional Access, PIM, RBAC, and secure app onboarding.

You’ll respond to alerts using Microsoft Sentinel, perform root-cause analysis with KQL and Log Analytics, and lead security initiatives from cloud hardening to

Qualifications

• 4–6 years of experience in cloud or information security.
• Solid hands-on Azure and Entra ID expertise.
• Bonus certifications: AZ-500, SC-200, SC-300, CCSP, CISSP or CISM.
• DevSecOps or IaC experience and PowerShell automation skills.
• Background in a regulated industry like pharma (GxP) is a plus.

Responsibilities

• Own the security posture of the Azure and Entra ID environment.
• Harden the cloud estate with Defender for Cloud, Azure Policy, and secure landing zones.
• Manage identity and access within Entra ID, Conditional Access, PIM, RBAC, and secure app onboarding.
• Investigate alerts with Microsoft Sentinel and perform root-cause analysis using KQL and Log Analytics.
• Lead security initiatives and coordinate pen testing with SOC, IT, Architecture, and Risk & Compliance.

Skills

Azure

Entra ID

Defender for Cloud

Azure Policy

RBAC

PIM

PowerShell

Education

AZ-500, SC-200, SC-300, CCSP, CISSP, or CISM certifications

Tools

Microsoft Sentinel

KQL

Log Analytics

Job description

Search X Recruitment is seeking a Cloud Security Engineer to own the security posture of our Azure and Entra ID environment. You will harden the cloud estate with Defender for Cloud, Azure Policy, and secure landing zones, while managing identity and access within Entra ID, Conditional Access, PIM, RBAC, and secure app onboarding.

You’ll respond to alerts using Microsoft Sentinel, perform root-cause analysis with KQL and Log Analytics, and lead security initiatives from cloud hardening to