> Markdown version of [/jobs/ext/1815839-cloud-security-engineer](https://www.wearedevelopers.com/jobs/ext/1815839-cloud-security-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Cloud Security Engineer - **Company:** Amazon.com, Inc. - **Location:** Denver, CO, United States (Remote available) - **Experience:** Expert - **Salary:** $124,800.0 - $135,200.0 - **Contract:** Permanent contract - **Skills:** Kubernetes Security, Microsoft Azure, Bash Shell, Microsoft Online Services, Cloud Computing, Cloud Computing Security, Cloud Engineering, Identity and Access Management, Intrusion Detection and Prevention, Python (Programming Language), Key Management, Log Analysis, Windows PowerShell, Kusto Query Language, Security Information and Event Management, Software Vulnerability Management, Policy as Code, Data Logging, Microsoft Power Automate, Cloud Monitoring, Mitre Att&ck, HybridCloud, Infrastructure Automation Frameworks, Bicep, Microsoft Sentinel, Terraform, Serverless Computing, Security Orchestration, Automation & Response, Key Vault - **Published:** July 12, 2026 - **Apply:** https://www.careerjet.com/jobad/us863be262f85f51fab6706d178ff87ded ## About the Role * 4-7 years of hands-on experience in Azure Cloud Security Engineering. * Strong experience with Microsoft Azure security services, including Defender for Cloud, Microsoft Sentinel, Defender XDR, and Defender for Cloud Apps (CASB). * Experience implementing Azure Policy, governance frameworks, and Infrastructure-as-Code (Terraform, Bicep, or ARM). * Experience performing CSPM assessments using CIS Azure Foundations Benchmark and Microsoft Cloud Security Benchmark (MCSB). * Strong knowledge of Azure IAM, networking, encryption, Key Vault, and cloud-native security best practices. * Experience securing hybrid cloud environments. * Proficiency in scripting and automation using PowerShell, Python, Bash, KQL, or similar technologies. Preferred Qualifications * Experience with container and Kubernetes security (AKS). * Knowledge of MITRE ATT&CK framework and cloud detection engineering. * Experience with cloud monitoring, logging, and security automation. * Strong documentation and technical communication skills. Certifications * Required: Microsoft Certified Azure Security Engineer Associate (AZ-500) * Preferred: CCSP or equivalent cloud security certification ## Description We are seeking an experienced Azure Cloud Security Engineer to support the design, implementation, and optimization of enterprise cloud security controls across Microsoft Azure. The ideal candidate will have strong expertise in Azure security services, cloud governance, CSPM, identity and access management, infrastructure-as-code (IaC), and cloud-native security tooling. This role involves implementing security guardrails, performing security assessments, automating compliance, and collaborating with platform and security teams to strengthen the organization's cloud security posture. Key Responsibilities * Design and implement Azure landing zone security controls, including identity, networking, VNets, NSGs, and private endpoints. * Configure, deploy, and optimize Microsoft Sentinel, Microsoft Defender XDR, Defender for Cloud, and Defender for Cloud Apps (CASB). * Perform Cloud Security Posture Management (CSPM) assessments against CIS Azure Foundations Benchmark and Microsoft Cloud Security Benchmark (MCSB), and recommend remediation plans. * Build and manage Azure Policy initiatives, policy-as-code, and automated remediation to enforce governance and reduce configuration drift. * Implement encryption, key management, and certificate governance using Azure Key Vault. * Configure Azure Monitor, Log Analytics, telemetry, alerting, and SIEM integrations. * Secure Azure services including AKS, Container Apps, Azure Functions, Logic Apps, and Azure Container Instances. * Conduct cloud architecture security reviews and threat modeling. * Develop Infrastructure-as-Code (Terraform, Bicep, ARM) security guardrails and vulnerability management workflows. * Support cloud security incident investigation and containment activities. * Create documentation, operational runbooks, standards, and knowledge transfer materials. ## Related Videos - [Best Practices for Using GitHub Secrets](https://www.wearedevelopers.com/videos/1214-best-practices-for-using-github-secrets) - [You can’t hack what you can’t see](https://www.wearedevelopers.com/videos/41-you-can-t-hack-what-you-can-t-see) - [Infrastructure as Code: The Developer's Secret Weapon](https://www.wearedevelopers.com/videos/1221-infrastructure-as-code-the-developer-s-secret-weapon) - [Back(end) to the Future: Embracing the continuous Evolution of Infrastructure and Code](https://www.wearedevelopers.com/videos/440-back-end-to-the-future-embracing-the-continuous-evolution-of-infrastructure-and-code) - [Develop enterprise-ready applications for Microsoft Teams with Azure resources on modern web technologies](https://www.wearedevelopers.com/videos/187-develop-enterprise-ready-applications-for-microsoft-teams-with-azure-resources-on-modern-web-technologies) - [Enabling automated 1-click customer deployments with built-in quality and security](https://www.wearedevelopers.com/videos/83-enabling-automated-1-click-customer-deployments-with-built-in-quality-and-security) ## Related Articles - [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers) - [7 Cloud Computing Trends Coming in 2025 for Developers](https://www.wearedevelopers.com/magazine/412-7-cloud-computing-trends-coming-in-2025-for-developers) - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking) - [Learning Kubernetes made easy with KubeCampus](https://www.wearedevelopers.com/magazine/348-learning-kubernetes-made-easy-with-kubecampus) - [Best Paying Jobs in Technology](https://www.wearedevelopers.com/magazine/256-best-paying-jobs-in-technology)