Cloud & Azure Security Architect - Incident Response

CliftonLarsonAllen LLP; Nashville (TN); On-site; USD 130,000 - 180,000; Full time

Job summary

CliftonLarsonAllen LLP (CLA) seeks a Security Architect - Cloud & Enterprise Security to lead hands-on security operations, cloud security, incident response, and automation within the IT Security Services team.

You will work with Microsoft Sentinel, Defender XDR, Defender for Cloud, and Azure environments, translating risks into actionable business guidance for technical and non-technical stakeholders.

Qualifications

• 7+ years IT experience, with 4+ years in security of IT systems.
• Bachelor's degree required; combination with experience may be accepted.
• Travel Less than 10% expected.

Responsibilities

• Design, implement, maintain, and improve security operations using Sentinel/ Defender/ Defender for Cloud and related technologies.
• Lead or support complex security investigations with evidence collection and containment.
• Develop threat-hunting queries, detection logic, and response playbooks.
• Provide security architecture guidance for Azure environments; AWS as needed.
• Develop automation scripts and integrations using PowerShell, Graph, REST APIs, and Azure services.
• Leverage AI tools to accelerate triage, summarize data, and automate workflows.
• Evaluate AI-driven security processes for accuracy, privacy, and oversight.
• Analyze data flows to identify risks and control gaps.

Skills

Analytical thinking

Problem solving

Communication skills

Mentorship

Leadership

Education

Bachelor's degree

CISSP

CCSP

Tools

Microsoft Sentinel

Microsoft Defender XDR

Microsoft Defender for Cloud

Microsoft Azure

AWS

PowerShell

Microsoft Graph

REST APIs

AI tools (Microsoft Security Copilot)

Job description

CliftonLarsonAllen LLP (CLA) seeks a Security Architect - Cloud & Enterprise Security to lead hands-on security operations, cloud security, incident response, and automation within the IT Security Services team.

You will work with Microsoft Sentinel, Defender XDR, Defender for Cloud, and Azure environments, translating risks into actionable business guidance for technical and non-technical stakeholders.