Hybrid Cloud Security Engineer II: Azure Defender & Policy

Patient First; Glen Allen (VA); Hybrid; USD 125,000 - 150,000; Full time

Benefits offered by this job

Health, Dental and Vision insurance

Disability, Life and Long Term care

401(k) Retirement Plan (employer match

Paid Annual Leave

Volunteer Time Off

Holiday Pay

Job summary

Patient First is seeking a Security Engineer II to strengthen cloud-native security across Azure and Microsoft 365 environments in the United States. You will handle security operations, vulnerability management, monitoring, auditing, firewall/EDR/SIEM support, and compliance reporting, with future-state duties for Azure Policy and governance.

Minimum three years in cybersecurity or security operations, experience with Azure security services, Defender for Cloud, SIEM tools, and knowledge of

Qualifications

• 3+ years in cybersecurity, security operations, cloud security or hybrid infrastructure security roles.
• Experience with Azure security services, Defender for Cloud, Sentinel or SIEM tools, identity, RBAC, and access control concepts.
• Knowledge of NIST, HIPAA, PCI, CIS, COBIT, or similar security frameworks.

Responsibilities

• Implement and maintain Defender for Cloud, Azure Policy, security baselines and cloud posture recommendations.
• Configure and support RBAC, Conditional Access, privileged access, and identity governance for Azure and Microsoft 365.
• Maintain centralized logging, alerting and monitoring pipelines for cloud workloads and security investigations.
• Support security gates in deployment workflows including policy validation, access review and exception management.
• Provide security input during architecture reviews, workload intake and go-live readiness.
• Move security left into design-time and pipeline governance.
• Standardize cloud security baselines and reduce manual validation.
• Translate security policies into Azure Policy and RBAC standards.
• Improve auditability by aligning monitoring, logging and compliance reporting to cloud workloads.
• Support firewall management, IDS/IPS/EDR management, security monitoring, auditing, vulnerability management and patch-related security coordination.
• Investigate alerts, participate in incident response and support threat hunting, log review and risk analysis.

Skills

Security operations

Cloud security

Vulnerability management

Threat hunting

Incident response

Auditing

Logging & monitoring

RBAC & access control

Azure Defender for Cloud

Education

Azure Security Engineer Associate

CISSP

Tools

SIEM/SOAR

EDR

Vulnerability scanners

Cloud Security Posture Management (CSPM) tools

DLP

Job description

Patient First is seeking a Security Engineer II to strengthen cloud-native security across Azure and Microsoft 365 environments in the United States. You will handle security operations, vulnerability management, monitoring, auditing, firewall/EDR/SIEM support, and compliance reporting, with future-state duties for Azure Policy and governance.

Minimum three years in cybersecurity or security operations, experience with Azure security services, Defender for Cloud, SIEM tools, and knowledge of