Senior Security Analyst – Azure

What You Will Do

• Monitor, investigate, and respond to security events and incidents in the Azure cloud environment, including networking, applications, and data storage.
• Collaborate with DevOps to integrate security best practices into Azure-based CI/CD pipelines and infrastructure-as-code processes (e.g., ARM templates, Terraform).
• Develop, document, and enforce Azure security policies and best practices (e.g., role-based access control (RBAC), AzureAD, Azure Security Center).
• Automate security detection, response, and vulnerability management tasks within Azure environments.
• Conduct threat hunting activities to identify potential security risks within cloud-based infrastructure.
• Guide teams on how to implement secure cloud-native services, including secure API access, encryption, and identity management within Azure.
• Perform thread modelling, vulnerability assessments, and risk analysis for Azure resources and provide remediation recommendations.
• Support compliance initiatives such as SOC2, ISO 27001, FedRAMP, and GDPR, ensuring that Azure deployments meet necessary security standards and regulations.
• Improve security automation in Azure environments, leveraging tools like Azure Sentinel, Microsoft Defender, and Azure Security Center.

What You Will Bring

• 5-8 years of experience in cybersecurity, with a strong focus on Azure cloud security and DevOps environments.
• Extensive hands-on experience securing Azure cloud infrastructure, including knowledge of Azure AD, Azure Security Center, Azure Sentinel, and Microsoft Defender.
• Familiarity with Azure-native security features such as encryption at rest, key vault management, and secure access controls (RBAC).
• Strong experience with infrastructure-as-code (e.g., Terraform, Azure Resource Manager templates) and CI/CD pipeline security.
• Proficient with security tools like SIEM (Splunk, ELK), EDR solutions (CrowdStrike, SentinelOne), and cloud security posture management (CSPM) platforms.
• Experience in Thread Modelling for cloud native SAAS applications
• Understanding of compliance frameworks (SOC2, ISO 27001, FedRAMP, GDPR) and how they apply to Azure environments.
• Certifications such as Microsoft Certified: Azure Security Engineer Associate, OSCP, or similar are highly desirable.