Senior Cloud Security Engineer- Hybrid- Mechanicsville, VA

• Design, implement, and secure enterprise Azure cloud environments.
• Identify cloud vulnerabilities, assess risks, prioritize remediation, and validate fixes.
• Configure Azure Firewall, WAF, NSGs, Application Gateways, VNets, and network segmentation.
• Implement Azure Policies, security controls, RBAC, MFA, and least-privilege access.
• Monitor security events using SIEM tools, including Microsoft Sentinel and Splunk.
• Lead cloud security investigations, incident response, threat hunting, and remediation tracking.
• Implement security gates in deployment pipelines and collaborate with engineering, DevOps, SOC, and governance teams.
• Maintain security documentation, architecture diagrams, compliance evidence, and audit readiness.
• Provide technical leadership and mentor junior engineers.

• 8+ years of enterprise cloud experience, including 5+ years in cloud security.
• Strong hands-on Azure cloud engineering and security experience.
• Experience with IAM, RBAC, PAM, Azure Policy, Automation Runbooks, and cloud networking.
• Knowledge of SIEM, Splunk Query Language, Microsoft Sentinel, vulnerability scanning, CNAPP, CWPP, and cloud security posture management.
• Experience with incident response, log analysis, threat intelligence, and vulnerability remediation.
• Knowledge of SEC530, Zero Trust, CIS Benchmarks, NIST CSF, and NIST 800-53.
• Experience in highly regulated or government environments.
• Strong communication, problem-solving, and technical leadership skills.

Required Certifications:

• Microsoft Azure Security Engineer Associate
• CompTIA Security+
• Certified Cloud Security Professional (CCSP)

Preferred:

• Microsoft Azure Infrastructure Solutions certification (AZ-305).