Security Engineer, Cloud

免费注册后解锁"你的匹配分 vs 高分画像"与个人技能缺口。

Position Title: Security Engineer, Cloud Position Location: India (Remote) Job Summary: The Cloud Security Engineer is responsible for securing and improving the organization’s cloud environments, with a primary focus on Microsoft Azure. This role partners closely with platform, engineering, infrastructure, and Security Operations teams to implement cloud security governance, secure architecture patterns, identity and access controls, monitoring capabilities, and compliance-aligned security controls. The ideal candidate combines hands-on Azure security expertise with strong knowledge of cloud governance, landing zone architecture, and secure deployment practices to help create a cloud environment that is secure, scalable, and operationally sustainable by design. Essential Functions: Design, implement, and maintain cloud security guardrails across Microsoft Azure environments, including subscription governance, resource organization, role-based access controls, and secure configuration baselines. Develop and support Azure landing zone architectures, including management group hierarchy, policy enforcement, governance standards, tagging strategies, and security controls that minimize organizational risk. Configure and maintain cloud security capabilities including encryption, secrets management, logging, monitoring, alerting, and secure remote administration solutions. Collaborate with platform, engineering, and infrastructure teams to conduct architecture reviews and implement secure cloud networking and hardening initiatives. Perform cloud security posture reviews to identify misconfigurations, excessive permissions, security gaps, and compliance drift within cloud environments. Support the investigation, detection, and remediation of cloud security incidents in partnership with Security Operations and infrastructure teams. Develop and maintain technical documentation and evidence demonstrating cloud security control implementation, monitoring, and compliance alignment. Support secure infrastructure-as-code (IaC) and deployment practices by establishing repeatable security guardrails and standards across environments. Provide recommendations for secure connectivity, segmentation, workload hardening, and monitoring coverage to improve cloud security maturity. Coordinate with Security Operations, Governance Risk and Compliance (GRC), architecture teams, and auditors to support cloud control validation and compliance reviews. Enable engineering and delivery teams to adopt secure cloud development and deployment practices while ensuring security requirements are measurable and consistently applied. Required Skills/Abilities/Competencies: Strong knowledge of Microsoft Azure cloud security architecture, including subscription governance, resource organization, and role-based access control (RBAC). Experience designing and implementing Azure landing zones, management group structures, governance frameworks, and policy-based security controls. Expertise in cloud identity and access management, privileged access controls, policy enforcement, secrets management, encryption, logging, and monitoring. Strong understanding of cloud networking, segmentation, workload hardening, and secure connectivity principles. Experience conducting cloud security assessments, posture reviews, and remediation planning. Ability to build, refine, and support cloud detection capabilities and coordinate cloud security investigations and response activities. Working knowledge of infrastructure-as-code (IaC) and policy-as-code concepts, including secure and repeatable deployment methodologies. Proficiency in scripting, automation, and cloud operational tooling to improve security effectiveness and efficiency. Ability to document technical architectures, communicate security requirements clearly, and collaborate effectively with technical and non-technical stakeholders. Experience mapping cloud security controls to audit, compliance, and evidence requirements. Kn

职位名称：安全工程师，云安全 职位地点：印度（远程） 职位概述：云安全工程师负责保护和改进组织的云环境，主要专注于Microsoft Azure。该角色与平台、工程、基础设施和安全运营团队紧密合作，实施云安全治理、安全架构模式、身份和访问控制、监控能力以及符合合规要求的安全控制。理想的候选人应具备实际操作Azure安全的专业知识，同时对云治理、登陆区域架构和安全部署实践有深入了解，以帮助打造一个在设计上安全、可扩展且运营可持续的云环境。 基本职能： 在Microsoft Azure环境中设计、实施和维护云安全护栏，包括订阅治理、资源组织、基于角色的访问控制和安全配置基线。 开发和支持Azure登陆区域架构，包括管理组层次结构、策略执行、治理标准、标记策略以及最小化组织风险的安全控制。 配置和维护云安全能力，包括加密、机密管理、日志记录、监控、告警和安全远程管理解决方案。 与平台、工程和基础设施团队合作，进行架构审查并实施安全的云网络和加固计划。 执行云安全态势审查，识别云环境中的错误配置、过度权限、安全缺口和合规偏差。 与安全运营和基础设施团队合作，支持云安全事件的调查、检测和修复。 开发和维护技术文档及证据，展示云安全控制的实施、监控和合规对齐情况。 通过在各环境中建立可重复的安全护栏和标准，支持安全的基础设施即代码（IaC）和部署实践。 提供关于安全连接、分段、工作负载加固和监控覆盖的建议，以提升云安全成熟度。 与安全运营、治理风险与合规（GRC）、架构团队和审计人员协调，支持云控制验证和合规审查。 使工程和交付团队能够采用安全的云开发和部署实践，同时确保安全要求可衡量并一致应用。 所需技能/能力/胜任力： 深入了解Microsoft Azure云安全架构，包括订阅治理、资源组织和基于角色的访问控制（RBAC）。 具有设计和实施Azure登陆区域、管理组结构、治理框架和基于策略的安全控制的经验。 精通云身份和访问管理、特权访问控制、策略执行、机密管理、加密、日志记录和监控。 深入理解云网络、分段、工作负载加固和安全连接原则。 具有执行云安全评估、态势审查和修复规划的经验。 能够构建、改进和支持云检测能力，并协调云安全调查和响应活动。 具备基础设施即代码（IaC）和策略即代码概念的工作知识，包括安全和可重复的部署方法。 熟练使用脚本、自动化和云运营工具，以提高安全有效性和效率。 能够记录技术架构、清晰传达安全要求，并与技术和非技术利益相关者有效协作。 具有将云安全控制映射到审计、合规和证据要求的经验。 知

⚑ 岗位信息收录自公开招聘页（Himalayas），以雇主官网为准