Senior Cloud Security Engineer – Microsoft Security & Cybersecurity Architecture 3665754

Axiom Path; Los Angeles (CA); Hybrid; USD 140,000 - 190,000; Full time

Benefits offered by this job

Healthcare coverage

Retirement matching

Paid vacation

Sick leave

Job summary

Axiom Path is seeking a seasoned cybersecurity leader to drive enterprise security architecture and cloud security initiatives in a mission-driven environment in Los Angeles. You will guide threat detection, incident response, and governance across a Microsoft-centered tech stack.

Ideal candidates bring 5+ years in cybersecurity or enterprise IT security, strong governance skills, and a track record in regulated settings.

Qualifications

• Bachelor’s degree in cybersecurity, computer science, information technology, information systems, or a related field.
• Minimum 5 years of cybersecurity, cloud security, or enterprise IT security experience.
• Hands-on experience administering Microsoft Entra ID including CA, governance, and PIM.
• Deep experience with Defender XDR, Defender for Cloud, and Sentinel.
• Experience applying the NIST Cybersecurity Framework and related controls.

Responsibilities

• Serve as the technical lead for enterprise cybersecurity architecture and security operations.
• Architect, implement, and administer security solutions across Microsoft-focused enviroments.
• Design identity governance, zero-trust, endpoint security, and secure configurations.
• Lead threat detection, incident response, vulnerability management, and monitoring.
• Develop detections, analytics rules, dashboards, and automation in Sentinel.

Skills

Cybersecurity leadership

Cloud security

NIST CSF

Threat detection

Incident response

IAM

Zero-trust

Education

Bachelor's degree in cybersecurity or related field

Tools

Microsoft Entra ID

Microsoft Defender XDR

Microsoft Sentinel

Microsoft Intune

Microsoft Purview

Defender for Cloud

AWS

Job description

Be Part Of A High-Performing Team

Join a mission-driven energy organization focused on delivering cleaner, more sustainable electricity solutions to communities across Southern California. This organization operates in a highly regulated environment where security, reliability, public trust, and operational excellence are critical. The technology team works collaboratively across data, systems, risk, finance, operations, customer-facing functions, and external partners, with a culture that values accountability, intellectual curiosity, sound judgment, and continuous improvement.

What’s In Store For You

• Full-time direct hire opportunity.
• Remote or hybrid work options available.
• Hybrid employees work approximately 2–3 days per week onsite in Downtown Los Angeles.
• Remote and hybrid employees attend organization-wide or team events approximately three times per year for 3–5 days per event.
• Standard working hours are aligned to 8:30 AM–5:30 PM Pacific Time.
• Benefits include healthcare coverage, retirement matching, paid vacation, and sick leave.
• Opportunity to serve as a highly visible cybersecurity technical lead in a growing, mission-focused organization.

How You Will Make An Impact

• Serve as the technical lead for enterprise cybersecurity architecture and security operations across a Microsoft-centered technology environment.
• Architect, implement, and administer security solutions spanning Microsoft Entra ID, Defender XDR, Intune, Sentinel, Purview, and Defender for Cloud.
• Design identity governance, privileged access, conditional access, zero-trust, endpoint security, and secure configuration standards.
• Lead enterprise threat detection, incident response, vulnerability management, security monitoring, and post-incident remediation.
• Build and tune Microsoft Sentinel detections, KQL queries, analytics rules, workbooks, automation, and response playbooks.
• Establish cybersecurity policies, architecture standards, technical roadmaps, and controls aligned with the NIST Cybersecurity Framework.
• Partner with audit, regulatory, risk, technology, and business teams to demonstrate control effectiveness and close security gaps.
• Manage and coordinate managed security service providers, including SLA oversight, deliverable review, and performance management.
• Evaluate cybersecurity risks related to new technology platforms, integrations, business processes, websites, customer portals, and third-party vendors.
• Identify opportunities to automate security processes and improve monitoring, reporting, and operational scalability.

Do You Have the Expertise to Lead in Microsoft Cloud Security & Cybersecurity Operations?

• Bachelor’s degree in cybersecurity, computer science, information technology, information systems, or a related field.
• Minimum 5 years of cybersecurity, cloud security, or enterprise IT security experience.
• Strong hands‑on experience administering Microsoft Entra ID, including Conditional Access, identity governance, and Privileged Identity Management.
• Deep experience with Microsoft Defender XDR, including Defender for Endpoint, Identity, Office 365, and cloud security capabilities.
• Proven hands‑on expertise with Microsoft Sentinel , including SIEM administration, KQL, detection engineering, analytics rules, dashboards/workbooks, and automation.
• Strong experience with Microsoft Intune, including endpoint configuration, compliance policies, device security, and application protection.
• Working knowledge of Microsoft Purview, including DLP, information protection, insider risk, and data classification.
• Experience with Microsoft Defender for Cloud and cloud security posture management.
• Practical experience applying the NIST Cybersecurity Framework, with knowledge of NIST 800-53 or NIST 800-171 controls.
• Hands‑on background in vulnerability management, threat intelligence, security monitoring, and incident response.
• Strong understanding of zero‑trust architecture, IAM, endpoint security, network security, data privacy, and security governance.
• Exposure to cloud platform security outside the Microsoft ecosystem, particularly AWS, is preferred.
• Experience with Windows/Linux endpoint hardening and SQL/database environments is valuable.
• At least one relevant cybersecurity certification such as SC-100, SC-200, SC-300, AZ-500, CISSP, CISM, or GIAC, or the ability to obtain one within 6–12 months of hire.
• Experience supporting a regulated environment such as energy, utilities, financial services, healthcare, or the public sector is highly desirable.
• Strong communication skills with the ability to explain complex cybersecurity concepts to both technical and non‑technical stakeholders.
• Comfortable operating independently, owning security initiatives, managing competing priorities, and working in a fast‑moving environment.