Cloud Security Engineer

Jobtailor; Washington (District of Columbia); On-site; USD 120,000 - 150,000; Full time

Job summary

Jobtailor in the United States is seeking a security engineer to own day-to-day Azure security engineering, including baselines, logging, monitoring, and remediation. You will partner with Infrastructure and Engineering to implement cloud controls and workload guardrails, ensuring secure configurations and governance across platforms.

The role requires hands-on experience with Defender for Cloud, Azure Policy, Entra ID, and SaaS security across Salesforce, Box, and Microsoft 365.

Qualifications

• Bachelor’s degree or equivalent professional experience in a relevant field.
• 4–8 years of experience in information security or cloud security disciplines.
• Hands-on experience securing Microsoft Azure environments.
• Ability to work independently while coordinating across teams and vendors.

Responsibilities

• Own day-to-day security engineering for Azure environments and remediation follow-through.
• Partner with Infrastructure and Engineering to implement security baselines and guardrails.
• Support Defender for Cloud, Azure Policy, Entra-adjacent controls, and conditional access inputs.
• Review hosted apps for secure architecture, logging, data protection, and readiness.
• Configure security controls for SaaS platforms like Salesforce, Box, and Microsoft 365.
• Coordinate security testing activities and remediation guidance across teams.
• Integrate telemetry into SIEM and detection workflows; support incident response.

Skills

Azure Security Architecture

Secure Configuration Practices

Logging

Monitoring

Cloud Control Hardening

SIEM Integration

Vulnerability Triage

Defender for Cloud

Microsoft 365 Security

Education

Bachelor's degree in cyber security, computer science, engineering, information systems, or related field

Tools

Azure Policy

Entra ID

Purview

Salesforce

Job description

• Own day-to-day security engineering for Azure environments, including secure configuration, cloud control hardening, logging, monitoring, and remediation follow-through
• Partner with Infrastructure and Engineering teams to implement Azure security baselines, secure networking patterns, key management practices, storage protections, and workload guardrails
• Support Microsoft Defender for Cloud, Azure Policy, Entra-adjacent cloud controls, conditional access inputs, and other Microsoft security capabilities
• Review hosted applications and third-party-developed cloud solutions for secure architecture, authentication, authorization, logging, data protection, and operational readiness
• Configure and improve security controls for SaaS platforms such as Salesforce, Box, Microsoft 365, and other business-critical cloud applications
• Support DevSecOps activities, including static and dynamic application-security testing coordination, vulnerability triage, and remediation guidance
• Integrate cloud, SaaS, and application telemetry into SIEM and detection workflows
• Partner with Security Operations on actionable alerting and response procedures
• Maintain sanctioned application lists, cloud security standards, exception records, and implementation documentation
• Execute immediate remediation actions and coordinate complex fixes across platform, application, and vendor teams
• Develop reporting on cloud security posture, open risks, remediation progress, and control maturity for security and technology leadership

Requirements

• Bachelor's degree in cyber security, computer science, engineering, information systems, or a relevant field, or equivalent professional experience
• 4–8 years of experience in information security, cloud security, infrastructure security, application security, or a related technical discipline
• Hands-on experience securing Microsoft Azure environments
• Ability to work independently in a lean team while coordinating across technology, vendor, risk, and business stakeholders
• Azure security architecture, Defender for Cloud, Azure Policy, logging, monitoring, and secure configuration practices
• Microsoft 365 security and compliance concepts, including Entra ID, Purview, Defender, and conditional access
• SaaS security administration for Salesforce, Box, and other enterprise cloud applications
• Static and dynamic application-security testing concepts, vulnerability triage, and secure SDLC practices
• SIEM integration patterns, alert tuning, security telemetry, and operational handoff to incident response teams
• Strong written communication skills for standards, procedures, exception documentation, and leadership reporting
• Applicants must be authorized to work in the United States without current or future employer-sponsored work authorization
• Microsoft Azure security certifications, CISSP, CCSP, or other relevant professional designations preferred
• Financial services or other regulated-industry experience preferred

Core Competencies

Demonstrates expertise in Azure Security Engineering, including secure configuration, logging, monitoring, and remediation. Proficient in implementing security baselines, managing SaaS security, and integrating security telemetry into SIEM workflows.

Highest-signal resume keywords

• Azure Security Engineering
• Microsoft Defender for Cloud
• SaaS Security Administration
• Static and Dynamic Application-Security Testing
• SIEM Integration

ATS Optimization Keywords

Hard Skills

• Azure Security Architecture
• Secure Configuration Practices
• Vulnerability Triage
• Cloud Control Hardening
• Logging
• Monitoring
• Secure SDLC Practices
• Operational Readiness
• Cloud Security Standards
• Exception Documentation

Soft Skills

• Strong Written Communication
• Independent Work
• Coordination Across Teams

Certifications & Qualifications

• Microsoft Azure Security Certifications
• CISSP
• CCSP

Industry Keywords

• Information Security
• Cloud Security
• Infrastructure Security
• Application Security
• Financial Services

Tools & Technologies

• Microsoft 365
• Salesforce
• Box
• Azure Policy
• Entra ID
• Purview