Cloud Security Engineer

About the role

We are seeking a Cloud Security Engineer (Azure) to support a Security Defense Engineering organization responsible for protecting enterprise environments across multiple security functions, including Insider Threat, Global Fusion Center operations, and Data Loss Prevention (DLP).

Responsibilities

• Support cloud security initiatives across multiple security domains, including insider threat detection, DLP intelligence, and security operations.
• Aid in the administration and optimization of SIEM platforms, including Microsoft Sentinel (Azure-focused) and Splunk.
• Onboard, normalize, and manage log data from Azure environments into Sentinel, leveraging log aggregators and ingestion pipelines.
• Maintain and monitor a range of cloud-native security tools, including Azure security services, CloudWatch, Security Lake, and other monitoring platforms.
• Collaborate with Prisma Cloud to perform vulnerability scanning and posture management across cloud environments.
• Contribute to the development and maintenance of API integrations using Python to connect and automate security tools.
• Support CI/CD pipeline integration, ensuring security tooling is properly deployed and maintained in cloud environments.
• Collaborate with senior engineers across SIEM and Cloud Security teams to enhance detection and automation capabilities.

Qualifications

• Experience with Prisma Cloud or similar cloud security posture management tools.
• Understanding of log aggregation, data pipelines, and security event ingestion.
• Knowledge of GRC tools such as RSA Archer.
• Exposure to DLP, insider threat programs, or SOC operations.
• Must have 6+ years of experience in cloud engineering, cybersecurity, or related field.
• Hands-on experience with Microsoft Azure, particularly: Log onboarding and monitoring within Microsoft Sentinel, Working knowledge of SIEM tools (Sentinel, Splunk, or similar), Experience with Python scripting, particularly for API integrations and automation, Exposure to CI/CD pipelines and DevSecOps practices, Familiarity with cloud security and monitoring tools, Strong problem-solving and analytical skills.