Security Engineer

SUMMARY:
Implement security controls using Azure Security Centre (Microsoft Defender for Cloud)

POSITION INFO:

Job Overview

12 months contract

The Security Engineer is responsible for ensuring security, compliance, and resilience in a cloud environment. This role focuses on designing and implementing security controls, configuring security services, and ensuring adherence to best practices and regulatory requirements. The ideal candidate will have expertise in cloud security, identity and access management (IAM), network security, and compliance frameworks.

Key Responsibilities

• Define security requirements and policies.
• Implement security controls using Azure Security Centre (Microsoft Defender for Cloud), Azure Policy, and other security tools.
• Configure network security, identity and access management (IAM), and data protection strategies.
• Conduct security assessments, vulnerability scans, and penetration testing to identify and mitigate risks.
• Monitor security logs, analyse threats, and respond to security incidents in a timely manner.
• Develop and maintain security automation scripts for continuous monitoring and compliance enforcement.
• Ensure compliance with industry standards such as CIS, NIST, ISO 27001, and regulatory frameworks.
• Collaborate with DevOps, Cloud, and Compliance teams to enhance security posture.
• Document security policies, procedures, and technical configurations.

Required Qualifications & Skills

• Education: Bachelor's degree in Computer Science, Information Technology, or related field (or equivalent experience)
• Microsoft Certifications
• Experience: Minimum 5 years of experience in cloud security, or IT security.
• Technical Skills:
• Strong knowledge of Azure security services (Azure Security Center, Azure Sentinel, Azure Policy, etc.).
• Experience with IAM principles, including RBAC, MFA, and Conditional Access.
• Proficiency in network security concepts such as firewalls, VPNs, and zero-trust architecture.
• Experience with penetration testing, vulnerability management, and security monitoring tools.
• Familiarity with IaC (Infrastructure as Code) using Terraform, Bicep, or ARM templates.

Understanding of incident response processes and forensics analysis