Cloud Security Engineer

Role overview A fully remote engineering role focused on designing, building, and operating cloud security controls across a Microsoft 365 and Azure environment. The position blends hands-on security engineering with proactive threat hunting and customer-facing advisory work, helping both internal teams and external clients measurably improve their security posture.

Responsibilities - Deploy, configure, and maintain Microsoft cloud security and compliance technologies, including Purview, Defender for Cloud, Azure Log Analytics, Entra ID, Privileged Identity Management, and Identity Governance. - Engineer and continuously refine technical security controls, automating recurring tasks to reduce manual effort and configuration drift. - Build and maintain Data Loss Prevention policies and monitor AI technology usage, implementing governance guardrails to mitigate data exposure and leakage. - Apply a red-team mindset to identify weaknesses through security reviews, exposure assessments, and control-effectiveness evaluations. - Translate technical risk into clear written reports and executive summaries for leadership, and act as a trusted security advisor on customer calls. - Partner with internal teams to ensure sensitive data is adequately protected across the organization.

Requirements - Hands-on experience engineering security controls within Microsoft 365 and Azure environments. - Strong working knowledge of Azure monitoring, identity governance, and data protection tooling. - Demonstrated ability to produce professional reports and executive-level summaries. - Strong presentation and customer-facing communication skills. - Self-directed work style suited to a remote setting with distributed teams.

Nice to have - Microsoft security certifications such as SC-200, SC-300, SC-400, AZ-500, or equivalent. - Familiarity with compliance frameworks including ISO 27001, SOC 2, or GDPR. - Experience with governance, risk, and compliance (GRC) programmes. - Exposure to AI governance or responsible-AI initiatives. - Background as a consultant in endpoint management platforms such as Configuration Manager or Intune. - Experience leading customer-focused workshops.

Benefits and work setup - Competitive base salary of $110,000 to $145,000 depending on experience and location. - 401(k) match of 200% on the first 5% of salary contributed, for a potential total match of 10%. - Medical, dental, and vision coverage with 99% of premiums covered for team members and dependents. - Flexible spending account (FSA) and health savings account (HSA) options. - Fertility benefits, parental leave, and paid time off. - Volunteer leave and charitable donation matching. - Tuition reimbursement, gym membership reimbursement, and an internet stipend. - Pet insurance. - Fully remote position; candidates must reside in one of the eligible U.S. states at the time of hire.