Description

This position offers a high-visibility platform to transform enterprise-level SecOps using modern AI and automation capabilities.
 

Key Exciting Responsibilities

Enterprise AI-SecOps Strategy: Own the AI-driven SecOps strategy and multi-year roadmap across our entire Azure infrastructure, setting architecture standards and defining security investment priorities.

Windows & SQL Server Infrastructure Security: Define and govern enterprise security architecture and exception frameworks across 22,000+ Windows VMs and 3,000+ SQL Servers.

Third-Party Patch Governance & AI Orchestration: Drive global third-party patch governance (across tools like NinjaOne, SCCM/MECM, WSUS, PatchMyPC, ManageEngine, Ivanti, BigFix), defining autonomous ring-based rollouts and AI-assisted troubleshooting standards to eliminate deployment failures.

Azure Governance, WAF & Zero Trust: Own enterprise Azure landing zone security, Azure Policy frameworks, RBAC models, Web Application Firewall (WAF) threat thresholds, and Zero Trust adoption.

AI-Driven Vulnerability & CVE Remediation: Direct CVE analysis across platforms (Qualys, Tenable, Rapid7, Defender) and threat-intel feeds (NVD, MSRC), leveraging AI agents for triage and automated fix deployments while presenting posture metrics to executive leadership.

Cloud Resilience & Global Audit Compliance: Direct DR/BCP strategies, RTO/RPO targets, and compliance execution for ISO 27001, SOC 2 Type II, NIST CSF/800-53, and CIS Benchmarks, serving as the lead technical stakeholder for security audits.

Security Automation & Global Leadership: Champion security automation using PowerShell, Python, Terraform, and AI Copilots within CI/CD pipelines, while mentoring and leading cross-functional engineering teams across North America and India.
 

Essential Skills & Experience

Professional Experience: 8+ years of dedicated experience in cloud security, SRE, or enterprise security operations, with proven success operating at 10,000+ endpoint scale.

Cloud & Security Mastery: Deep technical proficiency in Azure, Microsoft Defender, Microsoft Sentinel, Azure Policy, WAF, and the Azure Well-Architected Framework.

Infrastructure & Patch Tooling Expertise: Hands-on experience securing Windows Server and MS SQL Server ecosystems alongside enterprise patch management platforms (Azure Update Manager, NinjaOne, SCCM/MECM, WSUS, PatchMyPC, ManageEngine, Ivanti, or BigFix).

Vulnerability Management & Frameworks: Expert knowledge of CVE scoring, vulnerability scanners (Defender Vulnerability Management, Qualys, Tenable, Rapid7), and regulatory standards (ISO 27001, SOC 2 Type II, NIST CSF/800-53, CIS Benchmarks).

Automation & DevOps: Proficient in PowerShell, Python, GitHub, Azure DevOps, Terraform, and leveraging AI/Copilot tools for DevSecOps automation.

Education: Bachelor's degree in Computer Science, Information Technology, or a related field (Master's degree preferred).
 

Bonus Points For:

Certifications: Microsoft AZ-500, CISSP, Security+, or equivalent enterprise security credentials.

Global Team Leadership: Track record of leading, mentoring, and growing global engineering teams across multiple regions and time zones.

Executive Communication: Experience presenting security posture metrics, risk trade-offs, and compliance progress directly to C-suite and executive stakeholders

Key Skills

Education

Any Graduate