Security Engineer II – Hybrid Cloud

Cybersecurity Jobs; Glen Allen (VA); Hybrid; USD 125,000 - 150,000; Full time

Benefits offered by this job

Health insurance

Dental and Vision insurance

Disability insurance

Life insurance

401(k) with company match

Paid time off

Bereavement leave

Holiday pay

Recruitment bonus

Job summary

Patient First in Glen Allen, VA is seeking a Security Engineer II to strengthen operational security and cloud-native security across Azure and Microsoft 365 in a hybrid environment.

You will lead security operations, governance at design-time, incident response support, and compliance reporting while translating policies into Azure Policy, RBAC, and monitoring pipelines.

Qualifications

• Experience with Azure security services and Defender for Cloud.
• Familiarity with SIEM/SOAR tools and identity concepts (RBAC, access control).
• Understanding of vulnerability management, logging, alerting, and compliance evidence.
• Experience in regulated or healthcare environments preferred.
• Ability to communicate risk and remediation options to technical and non-technical audiences.

Responsibilities

• Implement and maintain security controls in Azure and Microsoft 365.
• Configure RBAC, Conditional Access, privileged access, and identity governance.
• Maintain centralized logging, alerting, and monitoring pipelines for cloud workloads.
• Support security gates in deployment workflows, including policy validation and access review.
• Provide security input during architecture reviews and production go-live readiness.
• Move security activities to design-time and pipeline-integrated governance.
• Standardize cloud security baselines and reduce manual validation.
• Translate security policies into Azure Policy and RBAC standards.
• Improve auditability and compliance reporting for cloud workloads.
• Support security operations including firewall, IDS/IPS, EDR, vulnerability management.

Skills

Cloud security

Security operations

Incident response

Architecture reviews

Risk communication

Education

High school diploma

Tools

Microsoft Defender for Cloud

Azure Policy

RBAC

Conditional Access

Microsoft 365

Sentinel

SIEM

DLP

EDR

Vulnerability scanning

Cloud security posture management tools

Job description

Patient First is seeking a Security Engineer II to strengthen operational security and advance cloud-native security across Azure and Microsoft 365. The position combines security operations responsibilities with design-time governance, incident response support, and compliance-focused reporting in a hybrid environment.

Role Location

Glen Allen, VA (hybrid)

Salary

USD 125,000 - 150,000 per year, depending on experience.

Responsibilities

• Implement and maintain Microsoft Defender for Cloud, Azure Policy, security baseline controls, and cloud posture recommendations.
• Configure and support RBAC, Conditional Access, privileged access, and identity governance models for Azure and Microsoft 365.
• Maintain centralized logging, alerting, and monitoring pipelines for cloud workloads to support security investigations.
• Support security gates in deployment workflows, including policy validation, access review, and exception management.
• Provide security input during architecture reviews, workload intake, and production go-live readiness.
• Move security activities from after-the-fact validation into design-time and pipeline-integrated governance.
• Standardize cloud security baselines and reduce reliance on manual security validation.
• Translate existing security policies into Azure Policy, RBAC standards, and operational control requirements.
• Improve auditability by aligning monitoring, logging, access review, and compliance reporting with cloud workloads.
• Support security operations including firewall management, IDS/IPS, EDR, security monitoring, auditing, vulnerability management, and patch-related security coordination.
• Investigate alerts, participate in incident response, and support threat hunting, log review, and risk analysis.
• Assist with security reviews for applications, systems, third-party vendors, and hybrid cloud implementations.
• Support compliance activities related to HIPAA, PCI, access control, vulnerability remediation, and audit evidence.
• Communicate security risks and remediation recommendations to technical teams and business stakeholders.

Requirements

• Employee must be 18 years of age or older.
• High school diploma or equivalent.
• At least 3 years of experience in cybersecurity, security operations, cloud security, or hybrid infrastructure security roles.
• Experience with Azure security services, Microsoft Defender for Cloud, Sentinel or other SIEM tools, and identity concepts including RBAC and access control.
• Understanding of vulnerability management, logging, alerting, incident response, and expectations for compliance evidence.
• Working knowledge of hybrid environments including Windows/Linux systems, networking, firewalls, and SaaS/PaaS/IaaS security, plus Microsoft 365.
• Ability to communicate risk, remediation options, and control requirements across technical and non-technical audiences.
• Experience in regulated or compliance-driven environments; healthcare experience preferred.
• Knowledge of NIST, HIPAA, PCI, CIS, COBIT, or similar security frameworks.
• Azure Security Engineer Associate, CISSP, or comparable security certification.
• Experience with SIEM/SOAR, DLP, EDR, vulnerability scanning, and cloud security posture management tools.

Technologies

• Microsoft Defender for Cloud
• Azure Policy
• RBAC
• Conditional Access
• Microsoft 365
• Sentinel
• SIEM tools
• IDS/IPS
• EDR
• Windows
• Linux
• SaaS, PaaS, IaaS
• NIST, HIPAA, PCI, CIS, COBIT
• SIEM/SOAR
• DLP
• Vulnerability scanning
• Cloud security posture management tools
• Azure Security Engineer Associate
• CISSP

Benefits

• Health, Dental and Vision insurance for employees and dependents
• Disability, Life and Long Term care insurance
• Employee Assistance Program, Flexible Spending accounts, 401(k) Retirement Plan (with employer match)
• Paid Annual Leave, Volunteer Time Off Pay, Bereavement Leave, Emergency Leave Bank
• Overtime Pay, Holiday Pay, Double time compensation for all holidays worked
• Discounted medical treatment at any Patient First location for employees and immediate family
• Recruitment bonus

Minimum Education

High school diploma or equivalent