Azure Cloud Security Engineer | Secure Cloud & SaaS

Brown Advisory; Baltimore (MD); On-site; USD 140,000 - 150,000; Full time

Benefits offered by this job

Medical

Dental

Vision

Wellness program

Financial wellness program

Gym membership discounts

Parental leave

401(k) match

Pet Insurance

Job summary

Brown Advisory is seeking a pragmatic Cloud Security Engineer to strengthen the firm’s Azure security posture and mature secure cloud operations. This role covers secure Azure management, SaaS security, and cloud control maturity within a lean information security team.

You will partner with Infrastructure, Engineering, Risk, and third‑party developers to ensure secure configuration, monitoring, and incident readiness across cloud services.

Qualifications

• Bachelor’s degree in cyber security, computer science, engineering, information systems, or a relevant field, or equivalent professional experience.
• 4–8 years of experience in information security, cloud security, infrastructure security, or a related technical discipline.
• Hands-on experience securing Microsoft Azure environments; financial services or other regulated-industry experience preferred.
• Ability to work independently in a lean team while coordinating across technology, vendor, risk, and business stakeholders.
• Microsoft Azure security certifications, CISSP, CCSP, or other relevant professional designations preferred.

Responsibilities

• Own day-to-day security engineering for Azure environments, including secure configuration, cloud control hardening, logging, monitoring, and remediation follow-through.
• Partner with Infrastructure and Engineering teams to implement Azure security baselines, secure networking patterns, key management practices, storage protections, and workload guardrails.
• Support Microsoft Defender for Cloud, Azure Policy, Entra‑adjacent cloud controls, conditional access inputs, and other Microsoft security capabilities as part of the broader cloud security stack.
• Review hosted applications and third‑party cloud solutions for secure architecture, authentication, authorization, logging, data protection, and operational readiness.
• Configure and improve security controls for SaaS platforms such as Salesforce, Box, Microsoft 365, and other business‑critical cloud applications.
• Support limited DevSecOps activities, including static and dynamic application‑security testing coordination, vulnerability triage, and practical remediation guidance for internal and third‑party development teams.
• Integrate cloud, SaaS, and application telemetry into SIEM and detection workflows, and partner with Security Operations on actionable alerting and response procedures.
• Maintain sanctioned application lists, cloud security standards, exception records, and implementation documentation in partnership with GRC and technology owners.
• Execute immediate remediation actions where appropriate and coordinate more complex fixes across platform, application, and vendor teams.
• Develop clear reporting on cloud security posture, open risks, remediation progress, and control maturity for security and technology leadership.

Skills

Azure security

Cloud security

DevSecOps

Vulnerability triage

Education

Bachelor’s degree in cyber security, computer science, engineering, information systems, or a relevant field

Tools

Azure Defender for Cloud

Azure Policy

Entra ID

Purview

Microsoft 365 security

Job description

Brown Advisory is seeking a pragmatic Cloud Security Engineer to strengthen the firm’s Azure security posture and mature secure cloud operations. This role covers secure Azure management, SaaS security, and cloud control maturity within a lean information security team.

You will partner with Infrastructure, Engineering, Risk, and third‑party developers to ensure secure configuration, monitoring, and incident readiness across cloud services.