Description

You will own end-to-end security remediation across a complex Azure ecosystem.

This role is on-site.

Responsibilities

• Lead vulnerability remediation across Azure VMs, AKS clusters, App Services, Storage Accounts, and networking components.
• Review and guide fixes for code-related vulnerabilities identified via SAST/DAST, secrets exposure, and insecure dependencies.
• Build detailed hardening guides covering OS, Azure services, Kubernetes, networks, and identity layers.
• Drive large-scale backlog remediation by prioritizing issues, defining workflows, and ensuring weekly progress.
• Act as the senior advisor for all security remediation streams, documenting gaps and long-term improvement plans.

Required Skills

• 12+ years of combined experience in security architecture, cloud security, or infrastructure security.
• Deep hands-on experience with Azure security covering Compute, Containers (AKS, ACR), and PaaS services.
• Expert knowledge of Identity & Access management including Azure AD/Entra ID, Managed Identities, and RBAC.
• Proficiency with Azure networking security controls like NSGs, ASGs, WAF, and Private Endpoints.
• Strong understanding of data security constructs, including Key Vault and Storage accounts.
• Experience with Microsoft Defender for Cloud and implementing Azure Policy.
• Ability to drive remediation across infrastructure, application layers, and cloud-native services.
• Experience resolving complex remediation backlogs in enterprise environments.

Preferred Skills

• Strong documentation skills for creating hardening guides and architectural plans.

Key Skills

Education

Any Graduate