Azure Cloud Security Lead — DevSecOps & Incident Response

Data Capital Inc; Mechanicsville (VA); On-site; USD 150,000 - 190,000; Full time

Job summary

Data Capital Inc. seeks an experienced Senior Cloud Security Engineer with hands-on Azure cloud security expertise to secure complex enterprise environments.

You will lead cloud security initiatives, implement preventive controls, and guide engineering teams to adhere to enterprise security standards. Responsibilities include designing secure cloud architectures, enforcing governance with Azure Policy, and automating security workflows.

Responsibilities

• Identify, assess, prioritize, and remediate cloud security vulnerabilities based on risk and business impact.
• Lead complex cloud security initiatives and provide technical guidance to engineering teams.
• Design, review, and implement secure cloud architectures for complex enterprise environments.
• Evaluate proposed cloud solutions, identify security gaps, and recommend appropriate security controls and compensating controls.
• Influence architecture and security decisions to prevent insecure configurations from reaching production.
• Implement security gates and automated security checks within CI/CD pipelines and DevSecOps workflows.
• Develop, implement, and maintain Azure Policy definitions and initiatives to enforce enterprise security standards, governance, and compliance requirements.
• Create and maintain Azure Automation Runbooks to support security operations, remediation, and incident response workflows.
• Monitor cloud security events using SIEM technologies and collaborate with the SOC to investigate and respond to security incidents.
• Lead the investigation, containment, and remediation of cloud security incidents using security logs and threat detection technologies.
• Review Azure Firewall and NSG rule requests to ensure compliance with security standards and least-privilege principles.
• Assess identity and access controls, network configurations, cloud resources, and security policies to identify misconfigurations and reduce attack surfaces.
• Develop and maintain security documentation, architecture and network topology diagrams, IP addressing schemes, access control documentation, and audit evidence.
• Support security audits, risk assessments, compliance reviews, and enterprise security assessments.
• Communicate complex technical security risks and remediation recommendations to technical teams, management, and non-technical stakeholders.
• Work independently on assigned projects while collaborating across engineering, security, and business teams.

Job description

Data Capital Inc. seeks an experienced Senior Cloud Security Engineer with hands-on Azure cloud security expertise to secure complex enterprise environments.

You will lead cloud security initiatives, implement preventive controls, and guide engineering teams to adhere to enterprise security standards. Responsibilities include designing secure cloud architectures, enforcing governance with Azure Policy, and automating security workflows.