Cloud Security Engineer

Job Description: Cloud Security Engineer

We are seeking an experienced Cloud Security Engineer with expertise in DevSecOps, Microsoft Application Security (MS App Sec), Cloud Access Security Broker (CASB), and Azure Defender. As a Cloud Security Engineer, you will play a crucial role in designing, implementing, and managing security measures to protect our cloud-based systems and applications.

Key Responsibilities

• Design and implement security solutions for cloud environments, focusing on DevSecOps principles to integrate security into development processes.
• Implement Microsoft Application Security (MS App Sec) best practices and tools to secure applications deployed in cloud environments.
• Configure and manage Cloud Access Security Broker (CASB) solutions to ensure visibility, compliance, and data security across cloud services.
• Utilize Azure Defender to monitor, detect, and respond to security threats and vulnerabilities in Azure cloud services.
• Conduct security assessments, risk analysis, and vulnerability testing of cloud infrastructure and applications.
• Collaborate closely with DevOps teams to automate security controls and processes within CI/CD pipelines.
• Develop and maintain security policies, standards, and procedures aligned with industry best practices and regulatory requirements.

• Proven experience as a Cloud Security Engineer or similar role, with a focus on DevSecOps practices and tools.
• In-depth knowledge and hands-on experience with Microsoft Application Security (MS App Sec) principles and tools.
• Expertise in configuring and managing Cloud Access Security Broker (CASB) solutions (e.g., Microsoft Cloud App Security, Netskope, Bitglass).
• Experience with Azure Defender (formerly Azure Security Center) for threat detection, monitoring, and response in Azure environments.
• Strong understanding of cloud security principles, including IAM, encryption, network security, and secure coding practices.
• Familiarity with compliance frameworks (e.g., GDPR, HIPAA, PCI DSS) and their application in cloud environments.
• Excellent analytical and problem-solving skills, with the ability to assess complex security issues and recommend effective solutions.
• Effective communication skills and the ability to collaborate with technical and non-technical stakeholders.