Greetings!
Hope you are doing good,
I am Rakesh from Gemini Consulting & Service getting in touch with you to see if you would be available and looking for any new opportunities and possibly be interested in discussing the below role that we currently have with one of our client.
The details of the position are as mentioned below:
Job Title: Cloud Security Engineer I (Microsoft M365 / Azure)
Location : Remote
Duration : Long Term
Position Summary
The Cloud Security Engineer I (M365 / Azure) supports the implementation, administration, integration, and improvement of cybersecurity controls across Weill Cornell Medicine’s Microsoft enterprise cloud platforms, helping protect patient care, research, and education.
This position provides the opportunity to develop experience across multiple areas of cloud infrastructure by applying risk analysis, industry knowledge, security standards, and cloud security best practices to support secure solutions without diminishing productivity.
Working under the guidance of more senior cloud security engineers and architects, this position assists with cloud security and identity implementations, integrations, automation, logging, escalated incident response, vulnerability remediation, and operational readiness. As experience increases, the individual is expected to become progressively more independent and proactive in managing assigned cloud security technologies, tasks, and projects.
Job Responsibilities
Owns, with guidance, a defined set of day-to-day security operations from the start, such as Microsoft Purview DLP alert triage and policy tuning, and Conditional Access change review.
Assists architects and senior engineers with the implementation, configuration, administration, and maintenance of security and identity controls across Microsoft 365 (Office 365) and Microsoft Azure environments.
Assists with security controls for M365 and Azure services, including identity and access management, endpoint and mobile device security, network security, encryption, logging and monitoring, governance, and data protection.
Triages and tunes Microsoft Purview Data Loss Prevention alerts and policies, and assists with information protection controls to support the secure use, storage, and sharing of institutional data.
Supports endpoint and mobile device security management through Microsoft Intune and related technologies.
Participates in escalated M365 and Azure security monitoring and incident response activities, including assisting with the creation, testing, and execution of playbooks.
Assists with configuring, analyzing, and integrating M365 and Azure logs with SIEM and other event-monitoring platforms.
Assists with automating repeatable M365 and Azure security tasks and processes using scripting, APIs, or other automation technologies.
Participates in M365 and Azure security projects and completes assigned technical tasks according to established requirements, timelines, architecture, and security standards.
Supports compliance with the HIPAA Security Rule, NIST CSF, and Zero Trust initiatives by gathering evidence, remediating findings, and maintaining control documentation.
Develops and maintains technical documentation, procedures, diagrams, configuration information, and operational support documentation.
Works collaboratively with M365 administrators, endpoint and cloud engineers, cybersecurity engineers, architects, analysts, application teams, vendors, and other technology teams to support secure M365 and Azure environments.
Stays current with evolving M365 and Azure cybersecurity threats, technologies, services, and industry best practices and develops technical skills required to assume greater responsibility.
Performs other related duties as assigned.
Knowledge, Skills, and Abilities
Experience or working knowledge of M365 and Azure, including their administration portals and security capabilities.
Working knowledge of Microsoft Purview DLP and information protection concepts, including policy rules, sensitive information types, sensitivity labels, encryption, alert review, and policy tuning.
Working knowledge of Microsoft Intune endpoint and mobile device management concepts, including device enrollment, configuration profiles, compliance policies, endpoint security policies, and application protection.
Working knowledge of Microsoft Entra ID concepts, including multifactor authentication, Conditional Access, role-based access control, and privileged access management.
Familiarity with security settings for Exchange Online, SharePoint Online, OneDrive, and Microsoft Teams, including external sharing, audit logging, and Microsoft Defender for Office 365.
Familiarity with Azure security services such as Azure Policy, Azure Key Vault, Azure Monitor, and Microsoft Defender for Cloud.
Working knowledge of PowerShell scripting and familiarity with Microsoft Graph APIs or similar technologies for M365 and Azure security automation.
Working knowledge of scripting and automation using Python, PowerShell, Bash, or similar technologies.
Working knowledge of networking and service protocols including TCP/IP, HTTPS, DNS, and SSH and familiarity with SaaS, PaaS, and IaaS cloud models.
Ability to troubleshoot technical problems and escalate complex cloud security issues appropriately.
Ability to learn new cloud security technologies and apply technical guidance, architecture standards, and security best practices.
Ability to work collaboratively with engineers, architects, analysts, administrators, vendors, and other technical teams.
Good written and verbal communication skills with the ability to create and maintain clear technical documentation, diagrams, and reports.
Thank You
Rakesh Kurva
Lead Technical Recruiter
Gemini Consulting Services
Phone :
Email ID
