Jobs → Engineering → Cloud Security Engineer

About the Role We are seeking a Senior Cloud Security Engineer to lead Microsoft Sentinel architecture and implementation. This role involves developing advanced security solutions and automation across Microsoft and third-party platforms. Key Responsibilities • Lead Microsoft Sentinel architecture, deployment, configuration, data onboarding, normalization, and optimization • Develop advanced KQL queries, custom analytics rules, threat-hunting queries, workbooks, and dashboards • Build SOAR automation using Sentinel automation rules, Azure Logic Apps, and Azure Functions • Integrate Microsoft and third-party security platforms using REST APIs, webhooks, and custom connectors • Secure Azure environments using Defender for Cloud, Azure Policy, Entra ID, Conditional Access, Key Vault, and network security controls • Implement Microsoft Purview capabilities, including DLP, sensitivity labels, information protection, insider risk management, and auditing • Automate repetitive security processes across Microsoft and third-party platforms • Implement Infrastructure as Code using Terraform, Bicep, or ARM templates • Manage security content and automation through Git, Azure DevOps, GitHub, and CI/CD pipelines • Investigate security incidents, perform threat hunting, analyze intrusions, and support incident response • Improve detection coverage, reduce false positives, and strengthen security controls • Establish SIEM/SOAR engineering standards and mentor security engineers Requirements • Experience with Microsoft Sentinel architecture and implementation • Proficiency in KQL queries and threat hunting • Knowledge of Azure Logic Apps, Azure Functions, and SOAR automation • Familiarity with REST APIs, webhooks, and custom connectors • Experience with Azure security controls and Defender for Cloud • Understanding of Microsoft Purview and DLP capabilities • Experience with Infrastructure as Code using Terraform, Bicep, or ARM templates • Familiarity with Git, Azure DevOps, GitHub, and CI/CD pipelines • Strong background in incident response and threat hunting • Ability to mentor and lead security engineers