Azure Cloud Security Engineer: Exfiltration Detection

Experis; Colorado; Hybrid; USD 120,000 - 190,000; Full time

Job summary

Experis is seeking a Cloud Security Engineer with deep Azure, Sentinel, Defender for Cloud, and KQL expertise to design and implement enterprise-scale data exfiltration detection and cloud security controls. You will build exfiltration detectors in KQL, map risks to controls, and drive secure deployments across multiple tenants.

You will participate in CI/CD workflows, policy-based security, and integration with M365, Entra ID, and Defender XDR.

Qualifications

• 5+ years in cloud security engineering.
• 3+ years hands-on Azure experience.
• Ability to map exfiltration points to controls and document gaps.
• Proven experience building and testing Sentinel exfiltration detections in KQL.

Responsibilities

• Deploy Defender for Cloud protections across multiple Azure tenants using Policy-as-Code pipelines.
• Centralize logging in Microsoft Sentinel and integrate Azure, M365, and AWS.
• Develop and tune KQL-based exfiltration detections for data volumes, rate changes, and abnormal access.
• Detect exfiltration in Azure IaaS by enabling Defender for Servers, logging, and traffic analytics.

Skills

Azure

Sentinel

Defender for Cloud

KQL

data exfiltration detection

Cloud security engineering

Policy as Code

CI/CD

M365 audit logs

Entra ID

Defender XDR

Cloud Apps

Threat hunting

Detection engineering

SC-200

AZ-500

SC-100

AWS GuardDuty

Tools

Azure DevOps

GitHub

Job description

Experis is seeking a Cloud Security Engineer with deep Azure, Sentinel, Defender for Cloud, and KQL expertise to design and implement enterprise-scale data exfiltration detection and cloud security controls. You will build exfiltration detectors in KQL, map risks to controls, and drive secure deployments across multiple tenants.

You will participate in CI/CD workflows, policy-based security, and integration with M365, Entra ID, and Defender XDR.