Position: Azure Security Engineer
Company: Enavate
Experience required: 3y
English level: intermediate

The **Security Engineer** is part of a team responsible for ensuring Enavate Cloud and customer environments are secured through multiple layers of security focused hardware, software, and services.

The Security Engineer role will be involved with many security focused areas of the business, including Security Threat Assessments, Security Incident Investigations, Security Compliance, partnering with our Security Operations Center provider and collaborating with our Internal Systems team that provides remote access, patching, malware, and monitoring services for virtual private and Azure public cloud environments. 

The Security Engineer will share responsibility in the assessment, implementation, management and documentation of a broad set of information security technologies and processes within our virtual private and Azure public cloud and customer environments. The person in this role will develop and implement process improvements for Enavate Cloud Services internal and/or external processes, particularly as those processes relate to Governance, Risk, and Compliance. 

**Key Responsibilities**

- Promote effective information security standards, processes, and procedures, as required, to support Enavate Cloud’s security and compliance commitments for all aspects of information security for the cloud team and customers.
- Audits the cloud environments on an ongoing basis to assess internal and customer standard and administrator user accounts to verify need and reduce exposure to attacks.
- Monitor security processes to ensure adherence through proactive remediation, user education and execution of supplemental controls for enforcement.
- Oversee and assist in the configuration and deployment of security-related tools like SIEM and Endpoint Detection and Response (EDR) for logging/event management and to mitigate against threats such as ransomware.
- Performs security scans to develop recommendations for remedying vulnerabilities and improving build/configuration processes to prevent associated threats.
- Partners with the Compliance Manager to ensure yearly attainment of SOC 2, HIPAA and CJIS certifications.
- Ensures compliance with internal policies/standards and regulatory requirements.
- Leads the execution of the Incident Response Plan as required and evolve the process to reduce risk through lessons learned to protect the cloud business.
- Administers the cloud password management platform to provide access on a “need to know” basis.
- Reviews and approves security exemptions for non-standard configurations such as additional firewall ingress/egress port access, granting administrator/sysadmin rights and other reasonable deviations from cloud standards deemed acceptable.
- Develop and coordinate a virtual Security Operations Center (vSOC) integration into cloud operations to establish 24/7 monitoring of intrusion detection and endpoint detection and response events with defined response mechanisms and escalation service level agreements.  
- Monitors industry trends and the threat landscape through industry newsletters, vendor notifications, blogs and security community groups, etc. and recommends necessary controls or countermeasures to protect the cloud.
- Leverages both proven and innovative security technology solutions to ensure compliance while resolving challenging cloud business requirements.
- Responds to security incidents, performs forensic activities and works with the operations team for threat mitigation, root cause analysis and formulation of security focused preventive measures.
- Regularly interacts with other team members to offer security and compliance related assistance and knowledge transfer activities in effort to cross-pollenate the Enavate Cloud environment.
- Evaluates, recommends, and deploys security tools and technologies in collaboration with input from other engineering team members and leadership.
- Verifies daily log collection and analyzes systems/application security logs, events, alerts and summary reports for anomalies.
- Willingly participates in after hours and weekend on call security support if required.
- Identifies and coordinates security awareness training with trusted vendors as necessary to address cloud team deficiencies.
- Promotes and supports a culture of compliance, risk avoidance/mitigation and cloud security accountability throughout the organization.
- Identifies opportunities to build GRC programs into the daily operations of Enavate Cloud to validate and improve cloud compliance.
- Provides analytical support to GRC for metrics tracking, improved status reporting and special projects to increase awareness of cloud security posture. 
- Participates in monthly status and quarterly strategy GRC meetings to report cloud security and compliance “current state”, to update the risk register scores and set prioritization for needed cybersecurity projects.
- Works with service providers to supplement internal security operations with additional industry subject matter experts to enhance tooling and promote risk mitigation capabilities.
- Escalates complex or extraordinary security and compliance issues to cloud management and GRC for implications on business impact and recommended counter measures.

**Qualifications**
- Minimum 5 years of experience in an operational Security Engineer role.
- CISSP, Security+, or industry-recognized Security Certification.
- Well versed in the ITIL process framework.
- Experience working as a Security Engineer within SOC 2, HIPAA, CJIS, ISO compliance requirements.
- Familiar with Azure IaaS, Azure Cloud Security and related Azure security compliance tools.
- Proficient in Microsoft Office, Remote Management and Monitoring (RMM) and IT Service Management (ITSM) applications.
- Extensive infrastructure background knowledge and hands-on experience with Active Directory, Group Policy, DNS, certificates, secure Windows virtual machine builds, networking, VLANS, firewalls, VPNs, load balancers and two-factor authentication to supplement security skills.
- Strong communication skills (verbal and written) with the ability to convey technical information to a non-technical audience.
- Ability to work well in a cross-functional, matrix management environment with a highly collaborative, team-oriented approach to problem solving.
- Excellent problem solving and analytical skills.
- Strong time management and organizational skills.
- Flexible to work in a 24x7x365 environment.

Preferred Requirements– Education, Skill & Abilities:
- Bachelors’ Degree in Information Security, Computer Science, or Information Systems.
- Fluent in power shell scripting for programming security related tasks.
- Ability to handle political, client cultural situations with a minimum of oversight
- Experience in defining measurable business performance improvements and in measuring "hard" business benefits.
- Comfortable in discussing issues, strategy and negotiating with project executives.

**Working Environment:**
- Home Office or Office Environment