Security Engineer II

Insight Global; Richmond (VA); Hybrid; USD 125,000 - 150,000; Full time

Job summary

Insight Global is seeking a Security Engineer II to strengthen cloud-native security across Azure and Microsoft 365. The role blends security operations, vulnerability management, monitoring, auditing, firewall/EDR/SIEM support, and compliance reporting with future‑state tasks for Azure Policy and Defender for Cloud.

Hybrid, onsite 3 days per week in Richmond, VA. Starting annual base salary range is $125K–$150K, depending on experience.

Qualifications

• At least 5+ years of experience in cybersecurity, security operations, cloud security, or hybrid infrastructure security.
• Experience with Azure security services, Microsoft Defender for Cloud, Sentinel or SIEM tools, identity, RBAC, and access control concepts.
• Understanding of vulnerability management, logging, alerting, incident response, and compliance evidence expectations.

Responsibilities

• Implementing and maintaining Defender for Cloud, Azure Policy, security baselines, and cloud posture improvements.
• Configuring RBAC, Conditional Access, privileged access, and identity governance for Azure and Microsoft 365.
• Maintaining centralized logging, alerting, and monitoring pipelines for cloud workloads and security investigations.
• Supporting security gates in deployment workflows, including policy validation and access review.
• Providing security input during architecture reviews and go-live readiness.
• Translating policies into Azure Policy, RBAC standards, and governance controls.

Skills

Azure Cloud Security

Security Operations

Vulnerability Management

RBAC & Access Control

Incident Response

Threat Hunting

Security Monitoring

Cloud Governance

Education

Azure Security Engineer Associate

CISSP

Tools

Defender for Cloud

SIEM

EDR

IDS/IPS

Azure Policy

Job description

Insight Global is seeking a Security Engineer II to support operational security responsibilities while strengthening cloud-native security across Azure and Microsoft 365 environments. Our client is searching for someone with Azure Cloud Security expertise, able to assess the current cloud posture, then get hands‑on to make the proper adjustments. This role combines current security operations, vulnerability management, monitoring, auditing, firewall/EDR/SIEM support, and compliance reporting with future‑state responsibilities for Azure Policy, Defender for Cloud, RBAC, Conditional Access, centralized logging, incident response, and cloud governance enforcement. This is a direct-placement engagement that will be hybrid, onsite 3 days per week in Richmond VA. We can provide a starting yearly base salary range between $125K - $150K depending on previous experience.

The responsibilities of this job include, but are not limited to the following:

• Implementing and maintaining Microsoft Defender for Cloud, Azure Policy, security baseline controls, and cloud posture recommendations;
• Configuring and supporting RBAC, Conditional Access, privileged access, and identity governance models for Azure and Microsoft 365;
• Maintaining centralized logging, alerting, and monitoring pipelines for cloud workloads and security investigations;
• Supporting security gates in deployment workflows, including policy validation, access review, and exception management;
• Providing security input during architecture reviews, workload intake, and production go-live readiness;
• Moving security from after‑the‑fact review into design‑time and pipeline‑integrated governance;
• Standardizing cloud security baselines and reducing dependency on manual security validation;
• Translating existing security policies into Azure Policy, RBAC standards, and operational control requirements;
• Improving auditability by aligning monitoring, logging, access review, and compliance reporting to cloud workloads;
• Supporting security operations including firewall management, IDS/IPS/EDR management, security monitoring, auditing, vulnerability management, and patch- related security coordination;
• Investigating alerts, participating in incident response, and supporting threat hunting, log review, and risk analysis activities;
• Assisting with security reviews for applications, systems, third‑party vendors, and hybrid cloud implementations;
• Supporting compliance activities related to HIPAA, PCI, access control, vulnerability remediation, and audit evidence;
• Communicating security risks and remediation recommendations to technical teams and business stakeholders.

Minimum education and professional requirements include, but are not limited to, the following:

• At least 5+ years of experience in cybersecurity, security operations, cloud security, or hybrid infrastructure security roles;
• Experience with Azure security services, Microsoft Defender for Cloud, Sentinel or SIEM tools, identity, RBAC, and access control concepts;
• Understanding of vulnerability management, logging, alerting, incident response, and compliance evidence expectations;
• Working knowledge of hybrid environments including Windows/Linux systems, networking, firewalls, SaaS/PaaS/IaaS security, and Microsoft 365;
• Ability to communicate risk, remediation options, and control requirements clearly across technical and non-technical audiences;
• Experience in regulated, or compliance-driven environments; healthcare experience preferred;
• Knowledge of NIST, HIPAA, PCI, CIS, COBIT, or similar security frameworks;
• Azure Security Engineer Associate, CISSP, or comparable security certification;
• Experience with SIEM/SOAR, DLP, EDR, vulnerability scanning, and cloud security posture management tools.