Description

You will embed security practices across the project lifecycle, from planning to operations, acting as a security consultant for internal teams and vendors.

This role is remote.

Responsibilities

• Embed security requirements into all project phases, including initiation, planning, design, and operation.
• Conduct security reviews and risk assessments for applications, cloud services, and third-party vendors.
• Operationalize vulnerability scanning, patch management, and end-to-end remediation.
• Integrate security logging, continuous monitoring, and incident response processes.
• Drive identity and access management (IAM) initiatives and privileged account management strategies.

Required Skills

• 10+ years of hands-on experience with the Microsoft security ecosystem: Azure, Entra ID, MS Intune, Microsoft 365, and Defender for Endpoint.
• Proficiency with endpoint protection and network security solutions: CrowdStrike, Zscaler (ZIA, ZPA, Web DLP), and Proofpoint.
• Strong background in IAM and PAM using Okta and Entra.
• Experience with SIEM tools, alerting, and log analysis, specifically Splunk.
• Understanding of network defenses: Firewalls, IPS/IDS, WAF, and DDoS/Bot Protection.
• Familiarity with Data Loss Prevention (DLP) configurations, preferably Microsoft Purview and Zscaler.
• Knowledge of Application Security (AppSec) principles, secure coding, and application risk assessments.

Preferred Skills

• Working knowledge of cybersecurity frameworks including HIPAA, NIST, and HITRUST.
• Experience validating cloud security policies and onboarding new cloud/SaaS applications.

Key Skills

Education

Any Graduate