Onsite Cloud Security Engineer — Azure, IAM & AI Security

Morgan & Morgan, P.A.; Orlando (FL); On-site; USD 120,000 - 180,000; Full time

Benefits offered by this job

Medical insurance

Dental insurance

401(k) plan

Paid time off

Paid holidays

Job summary

Morgan & Morgan, P.A. is seeking a Cloud Security Engineer to strengthen a Microsoft-centered security program in a large, multi-state firm. This hands-on role focuses on threat detection, tenant hardening, identity modernization, and security automation for sensitive client data.

You will lead security automation, manage vulnerability remediation, and govern Azure resources and data governance tools while communicating risk to technical teams and leadership.

Qualifications

• Experience in a law firm or similarly regulated environment.
• Experience securing AWS and/or GCP environments in enterprise settings.
• 4–7+ years of experience as a Security Engineer.

Responsibilities

• Engineer, tune, and operate detections and response workflows across Defender XDR and Sentinel.
• Lead tenant hardening across M365 and manage endpoint security with Defender for Endpoint and Intune.
• Build and maintain security automation to reduce manual effort and accelerate response.
• Own vulnerability assessment and remediation tracking with IT teams.
• Secure and govern Azure infrastructure and data governance tools (Purview).
• Strengthen IAM practices, including least-privilege and access reviews.

Skills

Defender XDR

Microsoft Sentinel

KQL

M365 tenant hardening

Azure security

IAM

Purview

PowerShell

Intune

Security automation

Tools

Logic Apps

Azure Functions

Entra ID

SOAR

Job description

Morgan & Morgan, P.A. is seeking a Cloud Security Engineer to strengthen a Microsoft-centered security program in a large, multi-state firm. This hands-on role focuses on threat detection, tenant hardening, identity modernization, and security automation for sensitive client data.

You will lead security automation, manage vulnerability remediation, and govern Azure resources and data governance tools while communicating risk to technical teams and leadership.