Azure Cloud Security Engineer — DevSecOps & SaaS Security

Brown Advisory; Baltimore (MD); On-site; USD 140,000 - 150,000; Full time

Benefits offered by this job

Medical

Dental

Vision

Wellness program participation incenti

Financial wellness program

Fitness event fee reimbursement

Colleague Assistance Program

Telemedicine Program

Adoption Benefits

Daycare late pick-up fee reimbursement

Basic Life & AD&D Insurance

Voluntary Life & AD&D Insurance

Short Term Disability

Paid parental leave

Group Long Term Disability

Pet Insurance

401(k) match

Job summary

Brown Advisory is seeking a pragmatic Cloud Security Engineer to strengthen Azure security posture and mature secure cloud operations. This blended role spans cloud configuration, SaaS security, application integration, and security tooling, collaborating with Infra, Engineering, and Risk teams to keep hosted apps and services securely configured, monitored, and aligned with the firm’s security controls.

The ideal candidate has 4–8 years in information security with hands-on Azure experience;

Qualifications

• Bachelor's degree or equivalent professional experience.
• 4–8 years in information security, cloud security, infrastructure security, application security, or related.
• Hands-on experience securing Microsoft Azure environments; financial services or regulated industries preferred.
• Ability to work independently in a lean team while coordinating across technology, vendor, risk, and business stakeholders.
• Microsoft Azure security certifications, CISSP, CCSP, or other relevant professional designations preferred.

Responsibilities

• Own day-to-day security engineering for Azure environments, including secure configuration, cloud control hardening, logging, monitoring, and remediation follow-through.
• Partner with Infrastructure and Engineering teams to implement Azure security baselines, secure networking patterns, key management practices, storage protections, and workload guardrails.
• Support Defender for Cloud, Azure Policy, Entra-adjacent cloud controls, conditional access inputs, and other Microsoft security capabilities as part of the broader cloud security stack.
• Review Brown Advisory-hosted applications and third-party cloud solutions for secure architecture, authentication, authorization, logging, data protection, and operational readiness.
• Configure and improve security controls for SaaS platforms such as Salesforce, Box, Microsoft 365, and other business-critical cloud applications.
• Support limited DevSecOps activities, including static and dynamic application-security testing coordination, vulnerability triage, and remediation guidance.
• Integrate cloud, SaaS, and application telemetry into SIEM and detection workflows, and partner with Security Operations on alerting and response procedures.
• Maintain sanctioned application lists, cloud security standards, exception records, and implementation documentation with GRC and technology owners.
• Execute remediation actions and coordinate complex fixes across teams.
• Develop reporting on cloud security posture, open risks, remediation progress, and control maturity.

Skills

Azure security

Cloud security

SIEM

Vulnerability triage

DevSecOps

Security tooling

Communication skills

Microsoft 365 security

Regulated industry experience

Education

Bachelor's degree in cyber security / CS / engineering or related

Tools

Defender for Cloud

Azure Policy

Entra ID

Purview

Job description

Brown Advisory is seeking a pragmatic Cloud Security Engineer to strengthen Azure security posture and mature secure cloud operations. This blended role spans cloud configuration, SaaS security, application integration, and security tooling, collaborating with Infra, Engineering, and Risk teams to keep hosted apps and services securely configured, monitored, and aligned with the firm’s security controls.

The ideal candidate has 4–8 years in information security with hands-on Azure experience;