Security Engineer

Role Overview

Corporate Endpoints & Identities

You’ll report to the CTO and collaborate daily with our Cloud Platform, Data, and Dev teams to weave security into every release cycle.

Key Responsibilities

• Define

  baselines in Microsoft Intune

  (CIS/Benchmarks) for Windows & macOS.
• Configure

  Microsoft Defender

  for Endpoint/Identity/Office; tune alerts & playbooks in Sentinel.
• Enforce leastprivilege &

  Multi-Factor Authentication (MFA)

  with

  Entra ID

  Conditional Access and

  Privileged Identity Management (PIM)

  .
• Roll out

  Security Service Edge (SSE) and Zero Trust Network Access (ZTNA

  ) solutions and policies for remote users.
• Encrypt and monitor OneDrive/SharePoint and shared network storage; implement

  Data Loss Prevention (DLP)

  and sensitivity labels.
• Implement

  Single Sign On (SSO) & System for Cross-domain Identity Management (SCIM)

  provisioning; inventory and score SaaS apps via

  Cloud Access Security Broker (CASB) or SaaS Security Posture Management (SSPM)

  tools.
• Conduct periodic access reviews and thirdparty

  risk assessments

  .
• Correlate logs across Sentinel, AWS Security Hub, and SaaS APIs.
• Develop and test

  Incident Response (IRP)

  plans and playbooks.
• Own playbooks for containment & eradication; lead postincident retrospectives.
• Map controls to frameworks (CIS Controls, SOC 2) and drive evidence collection.
• Deliver quarterly

  security awareness training

  and phishing simulations.

Qualifications

• Professional Experience:

• 5+ years

  in information security or SecOps with handson ownership of Microsoft 365 security workloads (Intune, Entra ID, Defender, Sentinel).
• Proven experience with

  AWS security services

  (GuardDuty, Security Hub, IAM, CloudTrail, KMS).
• Solid grasp of incident response, vulnerability management, and at least one

  security framework

  (CIS, CSF, RMF, SOC 2, ISO 27001).
• Experience working in

  multi-cloud environments

  (AWS, Azure, GCP preferred).

• Technical Skills:

• Proven experience administering

  Entra ID / Azure AD

  Conditional Access & PIM.
• Working knowledge of

  SSE / ZTNA

  products (e.g., Microsoft Global Security Access, Security Edge, Zscaler, Netskope).
• Strong analytical abilities, proficiency in

  Security Information Event Management (SIEM)

  and

  Security Orchestration, Automation, and Response (SOAR)

  .
• Comfortable writing automation in

  PowerShell, Python

  , or Bash and codifying policy via Terraform.
• Exposure to

  SaaS security posture management (SSPM)

  , SAML/OIDC, and SCIM provisioning.

• Data Management:

• Some knowledge of

  data governance, cataloging, and lineage tracking

  using tools like

  AWS Glue Data Catalog, Apache Atlas, and Collibra

  .
• Some knowledge of

  cloud-native data services

  (AWS Glue, Redshift, Athena, DynamoDB, S3, EMR, Kinesis).

• Governance & Security:

• Knowledge of

  data privacy regulations (GDPR, CCPA, HIPAA)

  and

  enterprise data security best practices

  .
• Implementation of

  RBAC, encryption, and auditing mechanisms

  for secure data access.

• Education:

• Bachelor’s or Master’s degree

  in

  Computer Science, Computer Engineering, or related field

  (or equivalent practical experience).

What We Offer

• Hybrid Work Environment:

  Enjoy the flexibility of remote work combined with a few days in our Hyderabad office for in-person collaboration.

• Innovative Projects:

  Shape the next generation of AI-powered solutions at CloudAI and drive meaningful impact on businesses worldwide.

• Professional Growth:

  Access to continuous learning opportunities, leadership development, and mentorship within CloudAI’s global network.

• Competitive Compensation:

  Attractive salary package, health benefits, and performance-based incentives.