Sr. Security Engineer

Summary of the Role

We are looking for a Senior Security Engineer to design, implement and operate enterprise security controls across an Azure-centric infrastructure in a strictly regulated healthcare data environment. In this hands-on role you will own Azure cloud security architecture, identity governance with Microsoft Entra ID, SIEM operations and detection engineering, vulnerability management, EDR and web filtering, and you will provide the technical backbone for SOC 2, HITRUST and HIPAA compliance.

Desired Skills

• Full-Time availability
• Advanced English (C1) or above
• 7+ years of experience in SecOps, cloud security engineering or infrastructure security
• Hands-on Azure Security: Deep experience with Defender for Cloud, Azure Firewall, Key Vault, Azure Policy and Secure Score optimization.
• Microsoft Entra ID Governance: Advanced administration of Entra ID (Azure AD), Conditional Access, Privileged Identity Management (PIM), RBAC and Entra ID Protection risk signals.
• SIEM & Detection Engineering: Hands-on experience deploying and managing Microsoft Sentinel or Splunk, log onboarding, and scripting with KQL, PowerShell and/or Python.
• Vulnerability & EDR Operations: Proven track record running enterprise vulnerability management programs and EDR solutions (Defender for Endpoint, CrowdStrike).
• Healthcare Compliance: Practical knowledge of HIPAA Security Rule requirements in a cloud environment.

Responsibilities

• Azure Cloud Security Architecture: Act as the subject-matter expert for Azure security controls (NSGs, Azure Firewall, Private Link, Key Vault, Defender for Cloud), enforce Azure Policy guardrails and review Infrastructure as Code (Terraform/Bicep) in CI/CD pipelines.
• Identity & Access Management: Administer Microsoft Entra ID, Conditional Access policies, PIM, RBAC, SSO/MFA and automated lifecycle governance.
• SIEM Operations & Threat Hunting: Deploy, tune and manage Microsoft Sentinel (or equivalent), writing custom KQL detection rules, parsers and automated SOAR playbooks to lower MTTR.
• Vulnerability & EDR Management: Own end-to-end vulnerability scanning and SLA-driven remediation, and manage enterprise EDR platforms (Defender for Endpoint, CrowdStrike, SentinelOne).
• Web Filtering & Perimeter Controls: Enforce web filtering, URL categorization and SSL/TLS inspection policies to prevent data exfiltration.
• Audit, Compliance & Incident Response: Provide technical evidence for SOC 2, HITRUST and HIPAA audits, and lead technical incident response activities.

Nice-to-Haves

• Certifications: AZ-500, SC-200, CISSP, GCIA, GCIH or OSCP.
• DaaS/VDI Security: Experience securing Azure Virtual Desktop or Windows 365.
• GRC Automation & AI: Exposure to GRC automation platforms (e.g., Vanta) and AI-assisted security or threat detection tools.
• Web Security Tooling: Experience with Zscaler or Netskope.
• Infrastructure as Code: Hands-on work with ARM templates alongside Terraform and Bicep.

Who You Are

• Cross-Functional Translator: You explain complex technical security findings clearly to compliance, audit and executive stakeholders.
• Proactive Owner: You spot configuration drift or security gaps on your own and drive remediation through to completion.
• Calm Incident Handler: You stay methodical and clear under pressure during security investigations and root cause analyses.