Position: Azure Security Engineer
Company: EPAM
Category: Security
Experience required: 3y
English level: upper

RESPONSIBILITIES
 The Azure Security Engineer is responsible for providing technical leadership
and subject matter expertise in Azure environments on enterprise scale, with
thorough knowledge of cloud engineering and good understanding of security
best practices standards, compliance, and regulations.
 Working across various cloud security domains such as Cloud Security Posture
Management, Identity and Access Management; Data Protection and its
application; Data Loss Prevention; Automatic Incident Response; Business
Continuity, Disaster Recovery; DevSecOps; Microservice Security, and custom
scripting around it.
 Plan, design and implement security solutions for multi-cloud systems and
workloads with Azure as a primary public cloud provider.
 Collaborate with adjacent teams (engineering, infrastructure, development,
database, operations, etc.).
REQUIREMENTS
 Direct Computer Science education (Bachelors+) OR equivalent experience.
 Security experience with any domain.
 Strong engineering background including experience with MS solutions such as
MS Exchange, MS Active Directory, MS Azure Active Directory, Office 365.
 Successfully participated in at least one production project.
 Understanding of concepts of a Software development process, cloud security,
and their assessment methodologies.
 Able to work closely with other project team roles (developers, BA, testers,
architects, managers).
 Expected to be able to follow and understand a defined security process, train
other team members, and contribute to process improvement.
 Scripting/software development experience is a must.
NICE TO HAVE
 Hands on experience with Azure services.
 Security engineering experience in at least one business domain.
 Understanding of at least one compliance/regulation such as ISO 2700x/PCI
DSS/HIPAA/HITRUST/GDPR/SOX/FedRAMP.
 Nice to have 1+ Security Certification such as AZ-900, AZ-103, AZ-500, MS-500,
MS-100, MS-101.
 Professional Security Certifications such as CISSP/CISM/CISA/ECSA/CCSK/SSCP
is considered as an advantage.
Candidates search key words:
 AD/Active Directory/Azure AD/ Azure Active Directory
 Security Engineer
 Azure
 Azure Cloud
 Microsoft + Cloud
 Cloud Security/CSPM/Cloud Security Posture Management
 Infrastructure security
 Cloud + security + Engineering
 DevSecOps/DevOps + security
 Scripting/Automation/Python/PowerShell
 Compliance/Regulations/Engineer + [PCI|SOX|FedRamp|NIST|HIPAA|HiTRUST]
 Security + [Azure|Microsoft]
 Tools + Subscriptions, Management Groups, Resource Groups, Cost Management,
Service Health, Azure AD, Virtual Machine, Virtual Network, Storage Account, Security
Center, Network/Application Security Groups, Application Gateway, Firewall, Traffic
Manager, Front Door, VPN/ExpressRoute, User Defined Route, Virtual machine scale
sets, App Services, Functions, Container Instances, Container registries, Kubernetes
services, Logic App, Key Vault, Activity Log, Monitor, Log Analytics, Application Insight,
Network Watcher, Recovery service, Private/Public DNS, DDoS protection, Advisors,
Policy, Automation, Dome 9, PaloAlto Prisma, Divvycloud, Cloud Health, Crowdstrike,
Cloudconformity, Cloudpassage
 Office 365/O365
 O365 Security
 Secure Authentication, SCCM, Intune, Conditional Access, Identity Protection,
Advanced Threat Protection/ATP, Defender, Defender ATP, Cloud App Security,
Windows Hello, MS Authenticator, Information Protection, Zero Trust