Cloud Security Engineer – Incident Response & IAM

Kuvare; Des Moines (IA); On-site; USD 100,000 - 125,000; Full time

Job summary

Kuvare is seeking a hands-on Security Administrator to join the Information Security team and secure a hybrid Azure/Microsoft environment. You will contribute to incident response, identity hardening, and cloud security engineering, operating across on‑prem and cloud infrastructure in a regulated financial services setting.

The role emphasizes DevSecOps practices, automation, and security‑as‑code, with emphasis on implementing robust controls and ongoing risk reduction.

Qualifications

• 7+ years in IT with 3+ years in Cybersecurity.
• Hands-on admin, engineering or operations with Microsoft tech.
• Security certifications and experience in regulated financial services.

Responsibilities

• Operate and tune detections in Microsoft Sentinel and Defender XDR.
• Design and automate response with SOAR playbooks.
• Lead incident response for breaches and compromises across cloud and on‑prem.
• Translate policies into enforceable technical controls.
• Develop disaster recovery and resilience strategies from a security perspective.
• Engineer Entra ID and manage privileged access controls.
• Harden cloud workloads and perform vulnerability scans.
• Build IaC solutions to deploy security controls.

Skills

Cybersecurity

Security Operations

Incident Response

Cloud Security

DevSecOps

Automation

Education

CEH

OSCP

AZ-500

SC-300

SC-200

SC-100

Tools

Microsoft Sentinel

Microsoft Defender XDR

SOAR (Logic Apps)

PowerShell

Python

Bicep/ARM/Terraform

Microsoft Entra ID

Intune

Key Vault

RBAC

Job description

Kuvare is seeking a hands-on Security Administrator to join the Information Security team and secure a hybrid Azure/Microsoft environment. You will contribute to incident response, identity hardening, and cloud security engineering, operating across on‑prem and cloud infrastructure in a regulated financial services setting.

The role emphasizes DevSecOps practices, automation, and security‑as‑code, with emphasis on implementing robust controls and ongoing risk reduction.