Cloud Security Engineer

Triwill Group; United States; On-site; USD 86,000 - 112,000; Full time

Benefits offered by this job

Competitive base salary

Medical, dental, vision insurance

401(k) retirement plan

Paid vacation and holidays

Remote work within the United States

Job summary

Jobgether is seeking a Cloud Security Engineer based in the United States to protect a large-scale Azure/Microsoft 365 environment. The role blends hands-on security work with cross-team collaboration on security controls, vulnerability management, and incident response.

The ideal candidate has 3+ years of cloud security experience, strong Azure knowledge, and familiarity with Defender, SIEM, CASB, and automation. Remote work within the United States is supported.

Qualifications

• Bachelor’s degree or equivalent professional experience in a technology field.
• At least 3 years securing cloud-based infrastructure and services.

Responsibilities

• Design, implement, and improve security controls across Azure and Microsoft 365.
• Configure Defender for Cloud/Endpoint and related security solutions.
• Assess cloud resources, AKS, containers, and identities for risks.
• Support audits, governance, and security reporting.
• Lead incident response activities and threat detection improvements.

Skills

Cloud security

Azure

KQL

PowerShell

Bash

REST APIs

RBAC

Identity management

Windows

Linux

Education

Bachelor’s degree in Cybersecurity

Tools

Microsoft Defender

SIEM

CASB

Azure DevOps

Kusto

ARM

Terraform

Job description

This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for a Cloud Security Engineer based in United States.

This role will help protect and continuously strengthen the security posture of a large-scale cloud environment built around Microsoft Azure and Microsoft 365. You will work across cloud security engineering, threat detection, vulnerability management, secure configuration, and security governance. The position combines hands‑on technical work with close collaboration across Cloud, Compliance, Information Security, and other internal teams. You will assess cloud resources, applications, containers, and identities to identify and reduce security risks before they become business‑impacting issues. You will also contribute to incident investigations, audit readiness, customer security assessments, and the continuous improvement of security controls and monitoring capabilities. This is an opportunity to work with modern cloud security technologies while helping establish resilient, well‑governed, and secure cloud operations.

Accountabilities

• Design, implement, and continuously improve security controls and configuration baselines across Microsoft Azure and Microsoft 365 in alignment with recognized security standards and frameworks.
• Configure, administer, and optimize cloud security technologies including Microsoft Defender for Cloud, Microsoft Defender for Endpoint, Microsoft Defender for Cloud Apps, and related solutions.
• Conduct security assessments of cloud resources, applications, Azure Kubernetes Service (AKS), and containerized workloads to identify vulnerabilities, misconfigurations, excessive permissions, and other security risks.
• Manage vulnerability remediation activities by prioritizing findings, coordinating corrective actions, and validating that identified issues have been properly resolved.
• Configure and enhance cloud security monitoring, threat detection, investigation, response, and automation using Microsoft Sentinel, Kusto Query Language (KQL), and related technologies.
• Partner with Cloud, Compliance, and other cross‑functional teams to ensure cloud services are securely designed, deployed, maintained, and hardened according to organizational and industry standards such as CIS Benchmarks and DISA STIGs.
• Respond to customer security inquiries, assessments, and questionnaires by gathering, validating, and clearly communicating information about security controls, technologies, and practices.
• Develop and maintain technical documentation, procedures, dashboards, alerts, and security reporting to strengthen visibility and operational effectiveness.
• Support internal and external audits by gathering evidence, validating control adherence, and demonstrating compliance with organizational, customer, and regulatory requirements.
• Participate in cloud security incident response by investigating suspicious, anomalous, or unauthorized activity and supporting broader security investigations.
• Continuously identify opportunities to improve cloud security processes, controls, automation, and operational resilience.

Requirements

• Bachelor’s degree in Cybersecurity, Computer Science, Engineering, or a related technology field, or equivalent professional experience.
• At least 3 years of experience securing cloud‑based infrastructure, services, and technologies.
• Demonstrated ability to identify, assess, and mitigate security risks within cloud environments.
• Practical experience securing Microsoft Azure through secure configuration, least‑privilege access, data protection, threat detection and response, and security hardening.
• Experience deploying, administering, and using security technologies such as Microsoft Defender, SIEM, CASB, vulnerability management platforms, and related security solutions.
• Working knowledge of Azure Log Analytics, Kusto Query Language (KQL), PowerShell, Bash, and REST APIs.
• Understanding of identity and access management concepts, including Microsoft Entra ID, RBAC, authentication, authorization, and least‑privilege access.
• Working knowledge of Windows and Linux operating systems.
• Familiarity with incident response, incident management, and change management processes.
• Strong analytical, troubleshooting, and problem‑solving capabilities.
• Excellent written, verbal, and presentation skills, with the ability to communicate technical concepts to both technical and non‑technical stakeholders.
• Strong organizational and prioritization skills, with the ability to manage competing priorities in a fast‑paced environment.
• Demonstrated initiative, accountability, attention to detail, adaptability, and commitment to continuous learning.
• Experience with a Cloud Service Provider, Managed Service Provider, SaaS provider, or similarly regulated cloud environment is preferred.
• 5+ years of Microsoft Azure experience, particularly securing cloud‑native technologies, AKS, and containerized workloads, is a plus.
• Knowledge of security and compliance frameworks such as NIST 800‑53, FedRAMP, SOC 1, SOC 2, or ISO 27001 is advantageous.
• Familiarity with IAM technologies and protocols such as Okta, SAML, OAuth, and OpenID Connect (OIDC) is preferred.
• Experience with Infrastructure as Code and deployment technologies such as ARM, Bicep, Terraform, and Azure DevOps pipelines is a plus.
• Working knowledge of network security principles, TCP/IP, DNS, TLS, and firewall technologies is advantageous.
• Familiarity with Agile, Scrum, and DevSecOps methodologies is preferred.
• Relevant cybersecurity certifications such as AZ‑500, AZ‑104, SC‑200, SC‑300, SC‑100, Security+, Cloud+, or equivalent are beneficial.
• Candidates must be legally authorized to work in the United States without requiring employment sponsorship.

Benefits

• Competitive annual base salary of $86,000–$112,000, with additional variable compensation and benefits potentially available based on experience, skills, and location.
• Comprehensive medical insurance.
• Dental and vision insurance.
• Life insurance.
• Short- and long‑term disability coverage.
• 401(k) retirement plan.
• Paid vacation and holidays.
• Professional development and continuing learning opportunities.
• Multiple training opportunities to support technical and career growth.
• Exposure to varied cloud security projects and modern cybersecurity technologies.
• Collaborative culture focused on customer success, transparency, and strong team relationships.
• Remote working opportunity within the United States.

We appreciate your interest and wish you the best!