Azure Cloud Security Engineer

MedReview Inc.; New York (NY); Hybrid; USD 130,000 - 185,000; Full time

Job summary

MedReview is seeking an AI/Cloud Security Engineer to implement and maintain cloud security tools across Azure and Microsoft 365. The role focuses on AI-driven security models, threat detection, and incident response, with on-site hours Monday-Thursday and remote Fridays for NYC-area residents.

Candidates should have 5–10 years of hands-on cloud security experience, strong IAM/RBAC background, and proficiency with Purview, Entra, and M365 security controls.

Qualifications

• Hands-on experience leveraging AI and machine learning technologies to enhance network or cloud security.
• Experience implementing security controls across Azure cloud infrastructure.
• Experience with Microsoft Purview security and compliance capabilities.
• Experience monitoring cloud infrastructure and systems for security threats.
• Experience working with Security Operations (SOC) teams to investigate and remediate incidents.
• Experience documenting security tools, system configurations, incident investigations, and remediation actions.

Responsibilities

• Standardize and implement Azure cloud security best practices, processes, and procedures across the organization.
• Design, deploy, and optimize AI-driven security models to detect malicious traffic, lateral movement, and emerging threats.
• Utilize AI and machine learning-driven security tools for anomaly detection, behavioral analysis threat intelligence correlation, and bias testing.
• Integrate and manage AI-enabled security platforms, including SIEM, SOAR, NDR, and XDR solutions, to automate threat detection and incident response.
• Identify and mitigate adversarial AI risks, including model poisoning, evasion attacks, and data integrity threats.
• Leverage AI technologies to reduce false positives, prioritize alerts, and improve Mean Time to Detect (MTTD) and Mean Time to Respond (MTTR).
• Configure and support Microsoft Entra Internet Access, Entra Private Access, and Global Secure Access to strengthen identity and network security.
• Manage and maintain Microsoft 365 Compliance and Security Center Controls.
• Collaborate with cross-functional teams to develop and document security standards, policies and best practices.
• Identify gaps in the organization's security posture and recommend new security tools, controls, and implementation strategies.
• Monitor cloud infrastructure for security incidents, breaches, and vulnerabilities, and lead incident response investigations.
• Conduct root cause analysis (RCA) following security incidents and support remediation efforts.
• Participate in security tabletop exercises and incident response preparedness initiatives.

Skills

AI/ML in security

Azure security

IAM/RBAC

SOC collaboration

Threat detection

Tools

Microsoft Purview

Entra Internet Access

Entra Private Access

Microsoft 365 Security Center

Microsoft 365 Compliance Center

Job description

Position Summary

The AI/Cloud Security Engineer is responsible for implementing, configuring, and maintaining cloud security tools that protect MedReview's cloud and AI infrastructure. This role will monitor and analyze security events, identify vulnerabilities, and implement security controls across Microsoft Azure and Microsoft 365 environments. The engineer will work closely with the security and infrastructure teams to ensure the organizations cloud and AI platforms remain secure, compliant, and resilient.

This role is onsite Monday-Thursday and remote on Fridays. You will not be considered for this role if you do not live in the NYC Tri-State area.

Non-Negotiable Requirements (Must-Have Experience)

• Candidates without the experience below will not be considered.
• Hands-on experience leveraging AI and machine learning technologies to enhance network or cloud security
• Strong experience with Microsoft Purview (Data Governance/Data Loss Prevention)
• Experience implementing and managing Microsoft Entra Internet Access/Entra security controls
• Experience with Microsoft 365 Compliance Center and Security Center
• Experience securing Microsoft Azure cloud environments

Job Responsibilities:

Standardize and implement Azure cloud security best practices, processes, and procedures across the organization. Design, deploy, and optimize AI-driven security models to detect malicious traffic, lateral movement, and emerging threats. Utilize AI and machine learning-driven security tools for anomaly detection, behavioral analysis threat intelligence correlation, and bias testing. Integrate and manage AI-enabled security platforms, including SIEM, SOAR, NDR, and XDR solutions, to automate threat detection and incident response. Identify and mitigate adversarial AI risks, including model poisoning, evasion attacks, and data integrity threatsLeverage AI technologies to reduce false positives, prioritize alerts, and improve Mean Time to Detect (MTTD) and Mean Time to Respond (MTTR). Implement and manage Microsoft Purview security and compliance capabilities, including Data Loss Prevention (DLP), auditing and governance controls. Configure and support Microsoft Entra Internet Access, Entra Private Access, and Global Secure Access to strengthen identity and network security. Manage and maintain Microsoft 365 Compliance and Security Center ControlsCollaborate with cross-functional teams to develop and document security standards, policies and best practices. Identify gaps in the organization's security posture and recommend new security tools, controls, and implementation strategies. Monitor cloud infrastructure for security incidents, breaches, and vulnerabilities, and lead incident response investigations. Conduct root cause analysis (RCA) following security incidents and support remediation efforts. Participate in security tabletop exercises and incident response preparedness initiatives.

Required Experience:

• 5-10 years of hands-on experience in Cloud Information Security and Cloud Security Engineering
• Experience implementing security controls across Azure cloud infrastructure
• Strong experience with identity and Access Management (IAM) and Role-Based Access control (RBAC)
• Hands-on experience with Microsoft Purview security and compliance capabilities
• Experience monitoring cloud infrastructure and systems for security threats, breaches, and vulnerabilities
• Experience working with Security Operations (SOC) teams to investigate and remediate incidents
• Experience documenting security tools, system configurations, incident investigations, and remediation actions

Preferred Experience:

• Experience applying AI or machine learning technologies within security environments
• Experience in healthcare or other regulated industries
• Familiarity with security frameworks and regulations such as HIPPA, HITRUST, ISO 27001, ISO 27002, NIST, CMS, or URAC

Certifications (Preferred):

CISSP CISMCISACCSPMicrosoft Azure Security Engineer Associate Other relevant cloud or cybersecurity certifications

Additional Requirements:

• Ability to communicate technical information clearly to both technical and non-technical stakeholders
• Participation in on-call rotation and availability during incident response situations
• Ability to work evenings or weekends during critical outages or security incidents