Microsoft Cloud & AI Security Engineer (SC-500 / AZ-500 + SC-200)

TRUE.org; Philippines; Remote; PHP 600,000 - 900,000; Full time

Job summary

TRUE.org is a Microsoft Direct Cloud Solution Provider delivering cloud security and managed services for SMB and mid-market clients. The role focuses on securing Azure and Microsoft 365 environments and earning Microsoft Cloud Security and Threat Protection specializations.

Responsibilities include deploying Defender for Cloud, Azure Firewall and Sentinel, tuning security controls, and responding to incidents.

Qualifications

• 2+ years hands-on Azure security; KQL.
• Microsoft Certified: Cloud and AI Security Engineer Associate (SC-500) or active AZ-500 earned before Aug 31, 2026.
• Microsoft Certified: Security Operations Analyst Associate (SC-200).
• A verifiable Microsoft Learn transcript or badge link in your application.
• Willingness to link your Microsoft Learn profile to TRUE.org's Microsoft partner organization in Partner Center for the engagement.

Responsibilities

• Deploy and tune Defender for Cloud, Azure Firewall, WAF, DDoS and Bastion.
• Build and operate Microsoft Sentinel: connectors, analytics rules, workbooks, playbooks.
• Investigate and respond to incidents in Defender XDR and Sentinel.
• Write customer-facing deployment documentation and architecture notes.

Skills

Azure security

KQL

Tools

Defender for Cloud

Defender XDR

Microsoft Sentinel

Azure Firewall/WAF

Key Vault

Job description

• TRUE.org is a Microsoft Direct Cloud Solution Provider serving the US and Canada (licensing, support, services, consulting). Full-time or long-term contract, remote, with some US-overlap hours.

About the role

You will secure customer Azure and Microsoft 365 environments for SMB and mid-market clients: Defender for Cloud, Defender XDR, Microsoft Sentinel, Azure Firewall/WAF and Key Vault. You will also help TRUE.org earn Microsoft Cloud Security and Threat Protection specializations.

What you'll do

- Deploy and tune Defender for Cloud, Azure Firewall, WAF, DDoS and Bastion.

- Build and operate Microsoft Sentinel: connectors, analytics rules, workbooks, playbooks.

- Investigate and respond to incidents in Defender XDR and Sentinel.

- Write customer-facing deployment documentation and architecture notes.

Must have

- Microsoft Certified: Cloud and AI Security Engineer Associate (SC-500), or an active Azure Security Engineer Associate (AZ-500) earned before Aug 31, 2026.

- Microsoft Certified: Security Operations Analyst Associate (SC-200).

- A verifiable Microsoft Learn transcript or badge link in your application.

- Willingness to link your Microsoft Learn profile to TRUE.org's Microsoft partner organization in Partner Center for the engagement.

- 2+ years hands-on Azure security; KQL.

Nice to have: SC-300, SC-401, SC-100; MSSP experience; US/Canada client exposure.