Azure Cloud Security Engineer — AppSec & Compliance

Archimedes; United States; On-site; USD 150,000 - 190,000; Full time

Benefits offered by this job

Health Insurance

Dental Insurance

Vision Insurance

Paid Time Off

Parental Leave

401K Matching

Adoption Assistance

Flexible Spending Account

Educational Assistance

Job summary

Archimedes is seeking an Engineer, Security to design, implement, and operate security controls for Azure and Microsoft cloud services, protecting PHI and ensuring HIPAA/SOC 2 compliance through secure design and continuous risk management.

The role partners with Infrastructure, DevOps, and Software Engineering to embed security-by-design into platforms and delivery pipelines, serving as the primary AppSec engineer across the SDLC and runtime.

Qualifications

• Bachelor’s degree or equivalent work experience required.
• 5+ years of cloud security experience with Azure.
• Experience with Defender for Cloud, SIEM, and incident response.
• Experience integrating security controls into CI/CD pipelines.

Responsibilities

• Design and implement cloud security controls across Azure workloads (IaaS/PaaS).
• Partner with Eng to embed security controls throughout the SDLC and CI/CD pipelines.
• Lead threat modeling and architecture reviews for new apps and changes.
• Tune detections and coordinate incident response using Defender and SIEM tools.
• Harden internet-facing apps with WAF and Front Door configurations and testing.

Skills

Cloud security

Azure security

Threat modeling

Secure SDLC

CI/CD security

Education

Bachelor’s degree in a related field

Tools

Microsoft Defender for Cloud

Microsoft Defender XDR

Microsoft Sentinel

Azure Policy

Azure Monitor

Azure Front Door / WAF

Job description

Archimedes is seeking an Engineer, Security to design, implement, and operate security controls for Azure and Microsoft cloud services, protecting PHI and ensuring HIPAA/SOC 2 compliance through secure design and continuous risk management.

The role partners with Infrastructure, DevOps, and Software Engineering to embed security-by-design into platforms and delivery pipelines, serving as the primary AppSec engineer across the SDLC and runtime.