Senior Azure Security Engineer

About the role

CyberOne is seeking a Senior Azure Security Engineer to join its Cyber Security team. The role focuses on designing, implementing, securing and supporting Microsoft security technologies across cloud, identity, endpoint, infrastructure and monitoring platforms.

Key responsibilities

• Act as a subject‑matter expert for Azure security, Microsoft Sentinel, Microsoft Defender XDR and related technologies.
• Design, implement and support enterprise security controls across Azure, Microsoft Entra ID and the broader Microsoft security ecosystem.
• Engineer and maintain Sentinel capabilities, including data connectors, analytics rules, KQL queries, workbooks and automation.
• Develop and optimise Defender capabilities such as Defender for Endpoint, Identity, Cloud, Office 365 and XDR.
• Create security monitoring use cases, threat detections and hunting queries aligned with MITRE ATT&CK.
• Design secure cloud and hybrid architecture patterns and provide guidance to project and engineering teams.
• Implement security automation using Logic Apps, Azure Functions, REST APIs, PowerShell and Python.
• Support vulnerability remediation, incident investigations and produce technical documentation.

Required profile

• Proven Azure security engineering experience in a large, complex enterprise.
• Hands‑on experience with Azure security services across IaaS, PaaS and hybrid environments.
• Practical experience with Microsoft Entra ID security features such as Conditional Access and Privileged Identity Management.
• Strong background with Microsoft Sentinel and Defender XDR, including endpoint, identity and cloud security.
• Experience designing cloud security architecture, hardening platforms and implementing security baselines.

Required skills

• Azure security services (Azure Policy, Defender for Cloud, Azure Monitor, Log Analytics, Azure Arc, Key Vault)
• Microsoft Entra ID, Conditional Access, Privileged Identity Management, Identity Protection
• Microsoft Sentinel, KQL, analytics rules, workbooks, automation rules, playbooks
• Microsoft Defender XDR suite (Endpoint, Identity, Cloud, Office 365)
• Automation tools: Logic Apps, Azure Functions, PowerShell, Python, REST APIs
• Infrastructure‑as‑Code concepts, Azure DevOps, Git, CI/CD