Hybrid Cloud Security Engineer | Incident Response

Kuvare Holdings; Des Moines (IA); On-site; USD 100,000 - 125,000; Full time

Job summary

Kuvare is seeking a Security Administrator to join the Information Security team in a hands-on role spanning Azure, Entra ID, M365, and on-prem infrastructure. You will contribute to incident response, identity hardening, cloud security engineering, and vulnerability remediation from day one.

The ideal candidate brings deep technical expertise in Security Operations, DevSecOps, and automation, with a compliance mindset to support financial services regulatory requirements.

Qualifications

• 7+ years of IT experience with at least 3 years in Cybersecurity.
• 4+ years hands-on with Microsoft technologies (admin/engineering/operations).
• Advanced cybersecurity certifications in good standing (e.g., CEH, OSCP, AZ-500, SC-300, SC-200, SC-100).
• Deep knowledge of Defender, Intune, Sentinel, and Entra ID to operate in live environments.

Responsibilities

• Operate and tune detections in Microsoft Defender XDR and Sentinel.
• Design and automate incident response with SOAR playbooks.
• Lead hands-on incident response for data breaches, malware, and identity compromises.
• Translate policies into enforceable technical controls with Risk leadership.
• Develop disaster recovery and resilience strategies from a security perspective.

Skills

Cybersecurity

Incident response

Hybrid cloud

Scripting (PowerShell/Python)

Security operations

Cloud security

Education

Advanced cybersecurity certifications (CEH, OSCP, AZ-500, SC-300, SC-200, SC-100)

Tools

Microsoft Defender

Microsoft Sentinel

Entra ID

PowerShell

Python

Terraform / ARM / Bicep

Job description

Kuvare is seeking a Security Administrator to join the Information Security team in a hands-on role spanning Azure, Entra ID, M365, and on-prem infrastructure. You will contribute to incident response, identity hardening, cloud security engineering, and vulnerability remediation from day one.

The ideal candidate brings deep technical expertise in Security Operations, DevSecOps, and automation, with a compliance mindset to support financial services regulatory requirements.