Azure Cloud Security & ESO Engineer

Hudson Data LLC; New York (NY); On-site; USD 120,000 - 180,000; Full time

Job summary

Hudson Data LLC is seeking a hands-on Cloud Security & ESO Engineer to design, implement, and operate security controls across cloud platforms and enterprise security tools. The role integrates security engineering with ESO platform administration and continuous improvement.

You will work with Infrastructure, Architecture, Dev, Identity, Risk, and Regulators to protect customer information, ensure resilient services, and align with bank policies and regulatory obligations.

Qualifications

• Strong hands-on knowledge of Azure security, Microsoft Entra ID, networking, logging and monitoring, encryption, vulnerability management, security-tool administration, platform integrations, and operational troubleshooting.
• Hands-on ability to implement conditional access, multifactor authentication, privileged access management, service principles, workload and managed identities, and role-based access control.
• Experience with Microsoft Defender for Cloud, Microsoft Sentinel, Azure Policy, Key Vault, cloud security posture management, SIEM use cases, alert tuning, and telemetry integration.
• Ability to automate technical and operational tasks using PowerShell, Python, Azure CLI, Terraform, Bicep, APIs, or similar tools.
• Working knowledge of NIST Cybersecurity Framework, NIST SP 800-53, CIS Benchmarks, FFIEC guidance, GLBA Safeguards, NYDFS Part 500, and applicable privacy requirements.
• Knowledge of change management, incident response, problem management, vendor escalation, evidence preservation, secure architecture, and technology lifecycle practices in a regulated environment.
• Ability to translate technical findings into clear risk statements, remediation plans, procedures, and concise communications for engineers, management, auditors, and regulators.

Responsibilities

• Engineer and maintain secure cloud architectures, landing-zone controls, preventive guardrails, identity-first controls across Microsoft Azure and other approved clouds.
• Administer and engineer ESO platforms supporting email, endpoint and mobile, secure web access, data protection, privileged access, vulnerability management, and monitoring; ensure operational health.
• Integrate cloud, identity, application, network, and security-tool telemetry into the SIEM and detection program; develop use cases, tune alerts, reduce false positives.
• Automate ESO and cloud-security tasks using PowerShell, Python, Azure CLI, Terraform, Bicep, APIs, or similar technologies.
• Perform architecture reviews, threat modeling, risk assessments, and control validation for new systems, changes, vendors, and data flows.
• Partner with technology owners to remediate vulnerabilities, excessive access, control gaps, and misconfigurations; track risk and validate compensating controls.
• Support incident response, security-platform upgrades and migrations, change management, data protection, audit evidence, and on-call support.

Skills

Azure security

Microsoft Entra ID

Networking

Logging & monitoring

Encryption

Vulnerability management

Security-tool administration

Platform integrations

Operational troubleshooting

NIST CSF

NIST SP 800-53

CIS Benchmarks

Tools

Terraform

Bicep

Azure CLI

PowerShell

Python

Job description

Hudson Data LLC is seeking a hands-on Cloud Security & ESO Engineer to design, implement, and operate security controls across cloud platforms and enterprise security tools. The role integrates security engineering with ESO platform administration and continuous improvement.

You will work with Infrastructure, Architecture, Dev, Identity, Risk, and Regulators to protect customer information, ensure resilient services, and align with bank policies and regulatory obligations.