Azure Cloud Security Engineer: Secure, Automate & Detect

CMG Financial; United States; On-site; USD 120,000 - 160,000; Full time

Job summary

CMG Financial is hiring a Security Engineer for our cloud environment to harden Azure and the hybrid setup, supporting one of the nation's largest privately held mortgage lenders.

Within the Information Security team you will own meaningful cloud security work from day one, focusing on Defender for Cloud, Entra ID, CSPM/CNAPP, IaC security with Terraform and GitHub Actions, and threat detection and response.

Qualifications

• Bachelor’s degree in Computer Science, Cybersecurity, Information Systems, or related field.
• 3+ years in cloud security or cloud engineering with hands-on Azure security.
• Experience implementing CSPM/CNAPP and least-privilege IAM in Azure.

Responsibilities

• Operate and tune Defender for Cloud across Azure subscriptions.
• Enforce guardrails with Azure Policy and CIS/NIST benchmarks.
• Apply least-privilege access in Entra ID with RBAC, PIM, and CA.
• Classify and protect data using Microsoft Purview and DSPM.
• Embed IaC security in Terraform and GitHub Actions pipelines.
• Support threat hunting, incident response, and automation.
• Map cloud controls to frameworks for regulatory evidence.

Skills

Azure security

Defender for Cloud

Azure Policy

Entra ID

CSPM/CNAPP

Terraform

GitHub Actions

Python

PowerShell

KQL

Education

Bachelor’s degree in Computer Science, Cybersecurity, Information Systems, or related field

Tools

Terraform

GitHub Actions

Job description

CMG Financial is hiring a Security Engineer for our cloud environment to harden Azure and the hybrid setup, supporting one of the nation's largest privately held mortgage lenders.

Within the Information Security team you will own meaningful cloud security work from day one, focusing on Defender for Cloud, Entra ID, CSPM/CNAPP, IaC security with Terraform and GitHub Actions, and threat detection and response.