Sr. Azure Cybersecurity Lead

The Matlen Silver Group, Inc.; New York (NY); Remote; USD 102,000 - 146,000; Full time

Job summary

The Matlen Silver Group, Inc. is seeking a hands‑on Lead Azure Cloud Security Engineer for a remote contract focused on a major Azure modernization within a highly regulated federal environment. You will implement security monitoring, automated remediation, and compliance readiness using Microsoft Sentinel, Defender for Cloud, and KQL, supporting FedRAMP High, FISMA High, and NIST SP 800‑53 Rev.

5. This leadership role requires deep Azure security configurations and collaboration in an Agile

Qualifications

• 5–7 years of hands‑on cybersecurity experience, preferably focused on cloud security engineering, vulnerability management, and security monitoring.

Responsibilities

• Configure and maintain Microsoft Sentinel and Log Analytics Workspaces for cloud security monitoring.
• Develop and optimize KQL queries and Sentinel analytic rules to identify security threats, vulnerabilities, and configuration issues.
• Build automated incident response workflows using Azure Logic Apps, Sentinel Playbooks, and Automation Rules.
• Configure data connectors, Azure Monitor Agent (AMA), and Data Collection Rules (DCRs) to collect and centralize security logs.
• Utilize Microsoft Defender for Cloud to monitor security posture, identify vulnerabilities, and remediate compliance gaps.
• Implement security hardening standards, including CIS Benchmarks and STIG configurations across Azure infra and containerized environments.
• Support FedRAMP High, FISMA High, and NIST SP 800-53 Rev. 5 compliance assessments.
• Gather and analyze security evidence, audit logs, and system configuration data for third‑party audits.
• Identify and remediate vulnerabilities, security findings, and open POA&M items.
• Work in Agile/Scrum to deliver security engineering tasks and manage deliverables.
• Integrate security tooling into Azure DevOps or GitHub CI/CD pipelines.

Skills

Cloud security engineering

Incident response

Agile/Scrum

Threat detection

FedRAMP/FISMA compliance

Security monitoring

Tools

Microsoft Sentinel

Microsoft Defender for Cloud

KQL

DCRs (Data Collection Rules)

Azure Monitor

Log Analytics

Azure Logic Apps / Playbooks

Job description

Lead Azure Cloud Security Engineer

Remote Contract | ~ $90/Hour

***No C2C!!- W2 ONLY- Open to GC and USC candidates only

Position OverviewWe are seeking a hands‑on Lead Azure Cloud Security Engineer to support a major Azure Cloud Modernization initiative within a highly regulated federal environment. This role will focus on cloud security engineering, monitoring, infrastructure hardening, automated remediation, and compliance readiness within a FedRAMP High and FISMA High environment. The ideal candidate will have 5–7 years of cybersecurity experience, strong hands‑on expertise with Microsoft Azure security tools, and experience supporting federal compliance requirements. This is a technical leadership role requiring deep experience with Microsoft Sentinel, Microsoft Defender for Cloud, Kusto Query Language (KQL), and Azure security configurations.

Key Responsibilities

• Configure and maintain Microsoft Sentinel and Log Analytics Workspaces for cloud security monitoring.
• Develop and optimize KQL queries and Sentinel analytic rules to identify security threats, vulnerabilities, and configuration issues.
• Build automated incident response workflows using Azure Logic Apps, Sentinel Playbooks, and Automation Rules.
• Configure data connectors, Azure Monitor Agent (AMA), and Data Collection Rules (DCRs) to collect and centralize security logs.
• Utilize Microsoft Defender for Cloud to monitor security posture, identify vulnerabilities, and remediate compliance gaps.
• Implement security hardening standards, including CIS Benchmarks and STIG configurations, across Azure infrastructure and containerized environments.
• Support FedRAMP High, FISMA High, and NIST SP 800-53 Rev. 5 compliance assessments.
• Gather and analyze security evidence, audit logs, and system configuration data to support third‑party audits.
• Identify and remediate vulnerabilities, security findings, and open POA&M items.
• Work within an Agile/Scrum environment to deliver security engineering tasks, participate in sprint planning, and manage technical deliverables.
• Integrate security tooling, vulnerability scanning, and compliance checks into Azure DevOps or GitHub CI/CD pipelines.

Required Qualifications

• 5–7 years of hands‑on cybersecurity experience, preferably focused on cloud security engineering, vulnerability management, and security monitoring.
• Strong experience with Microsoft Sentinel, Microsoft Defender for Cloud, KQL, and Data Collection Rules (DCRs).
• Hands‑on experience with Azure security configurations, including Virtual Networks, RBAC, and Microsoft Entra ID.
• Experience supporting or remediating environments preparing for FedRAMP or FISMA compliance assessments.
• Knowledge of NIST SP 800-53 security controls and federal compliance requirements.
• Experience with Azure Monitor Agent, Log Analytics Workspaces, and cloud log ingestion.
• Experience working in an Agile/Scrum engineering environment.

Preferred Qualifications

• Experience with Azure Logic Apps, Sentinel Playbooks, and security automation.
• Familiarity with ASIM parsers, Log Analytics Workbooks, and threat hunting.
• Experience implementing CIS Benchmarks and STIG security configurations.
• Knowledge of Azure Policy, PowerShell, Bicep, Terraform, or Ansible.
• Experience integrating security controls into CI/CD pipelines.

Preferred Certifications

• Microsoft Certified: Security Operations Analyst Associate (SC-200)
• Microsoft Certified: Azure Security Engineer Associate (AZ-500)
• Microsoft Certified: Cybersecurity Architect Expert (SC-100)
• Certified Cloud Security Professional (CCSP)
• CompTIA Security+ or SSCP
• Certified ScrumMaster (CSM) or SAFe Practitioner

***No C2C!!- W2 ONLY- Open to GC and USC candidates only