Security Engineer

Job Description - Security Engineer

We are seeking an experienced Azure Cloud Administrator with strong expertise in Azure infrastructure management, security services, monitoring, log analytics, and cloud operations. The ideal candidate should have hands-on experience in Azure security components, Data Collection Rules (DCR), Azure Monitor, Log Analytics Workspace, Kusto Query Language (KQL), Microsoft Sentinel, and enterprise-scale cloud deployments. The candidate will be responsible for managing Azure environments, implementing security controls, optimizing cloud operations, and supporting SOC/monitoring requirements.

Key Responsibilities:
Azure Cloud Administration

• Design, deploy, configure, and manage Azure cloud infrastructure.
• Administer Azure subscriptions, management groups, resource groups, and policies.
• Manage Virtual Machines, Virtual Networks, Load Balancers, Application Gateways, NSGs, and Azure Storage.
• Implement Azure governance, RBAC, tagging, and cost optimization strategies.
• Monitor and maintain high availability and disaster recovery solutions.

Azure Security Management

• Implement and manage Microsoft Defender for Cloud.
• Configure security baselines and cloud security posture management.
• Manage Azure Key Vault, Managed Identities, Conditional Access, and Privileged Identity Management (PIM).
• Perform vulnerability assessments and remediation activities.
• Implement Azure security best practices and compliance controls.

Monitoring & Log Management

• Configure Azure Monitor, Log Analytics Workspace, and Azure Monitor Agent (AMA).
• Design and implement Data Collection Rules (DCRs) for log collection.
• Configure diagnostic settings for Azure resources.
• Develop advanced KQL queries for troubleshooting, monitoring, and security investigations.
• Create dashboards, workbooks, and alert rules.

Microsoft Sentinel & SIEM

• Deploy and manage Microsoft Sentinel environments.
• Configure data connectors, analytics rules, watchlists, and automation rules.
• Integrate Azure, Microsoft 365, and third-party security solutions into Sentinel.
• Support incident investigation, threat detection, and response activities.
• Develop custom detections and hunting queries using KQL.

Identity & Access Management

• Manage Microsoft Entra ID (Azure AD).
• Implement Single Sign-On (SSO), Multi-Factor Authentication (MFA), and Conditional Access.
• Manage role assignments and privileged access controls.

Automation & Scripting

• Develop automation solutions using:
• PowerShell
• Azure CLI
• ARM Templates
• Bicep
• Terraform (preferred)

• Automate operational and security tasks.

Incident & Change Management

• Participate in incident response and troubleshooting activities.
• Perform root cause analysis and problem management.
• Follow ITIL-based change management processes.
• Maintain operational documentation and runbooks.

Required Skills:
Azure Services

• Microsoft Entra ID
• Azure Virtual Machines
• Azure Virtual Network
• Azure Storage Accounts
• Azure Backup & Site Recovery
• Azure Load Balancer
• Application Gateway
• Azure Key Vault
• Azure Policy
• Azure Monitor
• Log Analytics Workspace
• Azure Monitor Agent (AMA)
• Data Collection Rules (DCR)

Security Technologies

• Microsoft Defender for Cloud
• Microsoft Sentinel
• Conditional Access
• PIM
• RBAC
• Managed Identities
• MFA
• Security Center

Monitoring & SIEM

• Kusto Query Language (KQL)
• Log Analytics
• Azure Workbooks
• Alerting & Monitoring
• Diagnostic Settings
• Data Ingestion & Log Parsing

Scripting & Automation

• PowerShell
• Azure CLI
• ARM Templates
• Bicep
• Terraform

Desired Experience:

• 7-8 years of overall IT experience.
• Minimum 4-5 years of hands-on Azure administration experience.
• Experience implementing Microsoft Sentinel in enterprise environments.
• Experience creating and managing DCR-based log collection architecture.
• Experience with cloud security monitoring and incident response.
• Experience integrating third-party SaaS and security solutions with Azure.

Preferred Certifications:

• Microsoft Certified: Azure Administrator Associate (AZ-104)
• Microsoft Certified: Azure Security Engineer Associate (AZ-500)
• Microsoft Certified: Cybersecurity Architect Expert (SC-100)
• Microsoft Certified: Security Operations Analyst (SC-200)
• Microsoft Certified: Azure Solutions Architect Expert (AZ-305)