Cloud Security Engineer

Job Overview:

We are seeking a highly skilled and self-driven Cloud Security Engineer with expertise in Microsoft 365 environments. As an individual contributor, you will play a key role in securing cloud infrastructure, data, identity, and endpoints. This role will focus on Microsoft cloud security, identity security, endpoint security, data security, including DLP (Data Loss Prevention), CASB (Cloud Access Security Broker), and more. You will be responsible for implementing, managing, and continuously improving cloud security solutions while working closely with the client’s small security team.

Key Responsibilities:

• Microsoft 365 Security: Configure, monitor, and manage security features in Microsoft 365, including threat protection, information protection, and security governance.
• Identity Security: Implement and manage security for user identities and access using Azure Active Directory (Azure AD), including multi-factor authentication (MFA) and conditional access policies.
• Endpoint Security: Configure and manage endpoint protection tools to secure devices in a Microsoft environment, including integration with Microsoft Defender for Endpoint.
• Data Security: Set up and enforce Data Loss Prevention (DLP) policies and ensure compliance with regulatory standards.
• Cloud Security: Implement CASB (Cloud Access Security Broker) solutions to monitor and protect cloud applications.
• Incident Response: Respond to security incidents and mitigate risks within the Microsoft 365 environment. Work to identify vulnerabilities and apply necessary patches.
• Security Monitoring and Reporting: Continuously monitor security alerts and generate relevant reports to ensure the integrity and security of cloud-based services.
• Collaboration and Support: Collaborate with internal teams to implement security best practices and guide them on cloud security matters.
• Documentation and Best Practices: Create and maintain security documentation, including security policies, procedures, and runbooks.

Required Skills and Qualifications:

• Proven experience in cloud security, specifically in Microsoft 365 environments.
• Strong understanding of Azure Active Directory (Azure AD), Microsoft Defender, and other Microsoft security tools.
• Experience with implementing Data Loss Prevention (DLP) and Cloud Access Security Brokers (CASB).
• Familiarity with endpoint security and security governance within a cloud environment.
• Experience with Identity and Access Management (IAM) principles, including multi-factor authentication (MFA) and conditional access.
• Ability to independently identify, assess, and remediate security threats and vulnerabilities.
• Strong troubleshooting and analytical skills.
• Familiarity with security frameworks and compliance standards (e.g., NIST, ISO 27001, GDPR).
• Ability to work independently and take ownership of security tasks with minimal supervision.