Azure engineer - security

Job Title: Azure Security Engineer Remediation Liaison

Location:

Job Summary

Azure Security Engineer

Key Responsibilities

• Act as the primary point of contact for security remediation between onshore security teams and offshore delivery teams.
• Review and analyze findings from penetration tests, vulnerability scans, and compliance audits; translate them into actionable remediation tasks.
• Implement security configuration changes directly in Azure environments across IaaS, PaaS, and SaaS resources.
• Harden Azure infrastructure by applying security best practices for networking, identity, and data protection.
• Configure and manage Azure-native security services such as Defender for Cloud, Sentinel, Security Center, Policy, Key Vault, and RBAC.
• Automate security remediations and configuration enforcement using ARM templates, Bicep, Terraform, PowerShell, or CLI.
• Collaborate with offshore engineers to provide technical guidance, review remediation work, and ensure changes are deployed to standard.
• Track, document, and report remediation progress to stakeholders and leadership.
• Support incident response activities and root cause analysis for Azure-related security incidents.

Day in the Life

Azure Security Engineer Remediation Liaison

• Reviewing new security assessment findings, Sentinel alerts, or Defender for Cloud recommendations and prioritizing remediation actions.
• Applying direct configuration changes in Azure Portal or CLI (e.g., tightening NSG rules, enabling encryption, updating Key Vault access).
• Coordinating with offshore teams in standups or sync meetings, assigning remediation tasks, and validating implementation.
• Writing or updating Azure Policy definitions and applying them across subscriptions to enforce compliance.
• Automating repetitive remediation actions using scripting and IaC tools.
• Collaborating with application and infrastructure owners to patch vulnerable workloads and services.
• Documenting completed changes, updating remediation playbooks, and sharing technical knowledge across global teams.
• Investigating and addressing escalated incidents to ensure long-term resolution.

Required Skills & Qualifications

• Strong hands-on expertise with Microsoft Azure services, including governance, networking, security, and compliance.
• Proficiency in Azure Security Center, Defender for Cloud, Sentinel, Azure Policy, Key Vault, and monitoring solutions.
• Deep understanding of identity and access security: RBAC, Conditional Access, Managed Identities, and PIM.
• Experience remediating vulnerabilities and misconfigurations in Azure environments.
• Proficiency with Infrastructure as Code (ARM, Bicep, Terraform) and scripting (PowerShell, CLI).
• Strong troubleshooting skills in cloud networking, access control, and security incidents.
• Excellent communication skills to collaborate with global/offshore teams.

Preferred Qualifications

• Microsoft Certified: Azure Security Engineer Associate (AZ-500) or higher (Solutions Architect, Cybersecurity Architect).
• Experience with hybrid cloud security and integration with on-premise security tools.
• Familiarity with compliance and security frameworks (CIS, NIST, ISO27001, SOC 2).
• Prior experience remediating audit findings in enterprise Azure environments.