Azure Security

Azure Security Cybersecurity Jobs

3 jobs found

1mo ago

Cybersecurity Engineer

LevelBlue LLC United States

United States

1mo ago Closed

$85k - $120k/yr Full time Azure Conditional Access Azure Security Azure Security Posture Management

This position is no longer accepting applications (closed Oct 18, 2026).

Job Description

This Senior Cybersecurity Engineering Consultant position at LevelBlue LLC focuses on delivering and uplifting Microsoft security programs for clients across the United States (onsite). You will lead Microsoft Purview engagements, harden Microsoft Defender XDR and Entra ID security in real client tenants, and produce client-ready artifacts that support execution and operational handover.

Key Responsibilities

Lead Purview engagements including current-state assessment, target design, phased rollout, and configuration of scoped capabilities such as information protection, DLP, audit, and related controls.
Implement and harden Microsoft Defender XDR and Entra ID security, including Conditional Access and identity-protection patterns, aligned to the client’s operating model rather than a demo tenant.
Deliver Azure security posture assessments and guided hardening covering landing-zone and control-plane hygiene, Defender for Cloud, and a prioritized remediation roadmap.
Where in scope, perform assessment-level Active Directory and hybrid identity work such as privilege exposure, delegation considerations, legacy protocol exposure, and provide a prioritized hardening roadmap.
Produce client-ready artifacts including gap analyses, configuration baselines, implementation plans, and an operational handover that can be executed.
Run workshops with security, compliance, identity, and IT stakeholders to capture requirements, decisions, risks, and scope changes.
Support pre-sales by providing effort estimates, defining technical scope, and shaping solutions.

Required Qualifications

Senior consulting or professional-services delivery, including workshops, scope development, and producing artifacts accepted by the client.
Hands-on Microsoft Purview implementation in a production or client tenant, with experience designing and configuring controls.
Hands-on Microsoft Defender XDR, including at least Defender for Endpoint plus one of Identity, Office, or Cloud Apps.
Hands-on Entra ID security, including Conditional Access, identity protection or risk patterns, and privileged-access basics as implemented in the tenant.
Ability to assess requirements, recommend a target configuration, and provide practical how-to guidance, including what to phase in and what not to enable.

Technology Focus

Microsoft Purview
Microsoft Defender XDR
Defender for Endpoint
Entra ID
Conditional Access
Identity protection / risk patterns
Microsoft Defender for Cloud
Azure security posture assessments
Active Directory
Microsoft Sentinel
AWS

Strongly Preferred

Active Directory security assessments in hybrid estates, covering privilege, stale admin paths, legacy authentication, and a hardening roadmap.
Azure security assessments and control implementation, including Defender for Cloud.
Microsoft Sentinel enablement for Purview, Defender, and Entra telemetry, including connectors, data usefulness, and detections.

Useful Experience

AWS or multi-cloud posture reviews.
Network-edge reviews on occasion, such as firewall or VPN policy, logging, and segmentation.

Certifications (Desirable)

Most relevant: SC-400; SC-300; SC-200
Also useful: SC-500 (AZ-500); SC-100; CISSP or CISM

Location and Compensation

Location: United States (onsite)

Salary: USD 85,000 - 120,000 per year

View full job page →

1mo ago

Application Security Architect

All IT Solutions Richmond, VA

Richmond, VA

1mo ago Closed

Contract Api Security Application Security Azure

This position is no longer accepting applications (closed Oct 18, 2026).

Job Description

All IT Solutions is seeking an Application Security Architect for a contract client engagement in Richmond, VA (hybrid). This role leads application-security architecture, data protection and privacy strategy, and threat modeling across a hybrid environment spanning cloud and enterprise platforms.

Key Responsibilities

Lead the data protection strategy, data governance frameworks, and privacy posture across a state-wide transportation ecosystem.
Define classification, encryption, storage, and access for structured, unstructured, and spatial (GIS) data across cloud data platforms.
Support architecture, development, and cybersecurity teams in performing threat modeling, producing secure architectural designs, and ensuring compliance within the client environment.
Set application-security architecture principles, standards, patterns, reference implementations, and guardrails for web, mobile, API, microservice, and cloud-native systems.
Conduct architecture and design reviews to identify trust boundaries, attack paths, data flows, security gaps, and compensating controls.
Lead or facilitate threat modeling efforts for new applications, major features, integrations, and high-risk changes.
Establish repeatable security requirements for authentication, authorization, session management, encryption, secrets management, logging, privacy, API protection, and data protection.

Required Qualifications

Must be local to the Richmond, VA area with onsite presence required.
10 years in software engineering, application security, security engineering, or a related technical role.
6 years of experience designing and implementing security architecture for IT systems.
6 years applying secure software-development principles and common risk awareness, including OWASP Top 10, insecure authorization, injection, deserialization, and API abuse.
6 years designing and implementing end-to-end security architectures for data-at-rest, in-transit, and in-use for the full Microsoft stack (Azure, O365, Power Platform, D365).
6 years of demonstrated experience with threat modeling and security architecture reviews.
6 years securing APIs, web applications, distributed systems, cloud platforms, CI/CD pipelines, and containerized workloads.
6 years with identity and security technologies, including OAuth 2.0, OpenID Connect, SAML, JWTs, authorization design, PKI/TLS, encryption, and secrets-management practices.
10 years of strong written communication skills, including the ability to create architecture diagrams, standards, risk assessments, and actionable remediation plans.

Relevant Technologies

Azure, O365, Power Platform, D365
GIS
OAuth 2.0, OpenID Connect, SAML, JWTs, PKI/TLS
CI/CD

Preferred Qualifications

CISSP, CSSLP, CCSP, GIAC, or relevant vendor certifications.
Experience owning solution design for secure software development lifecycle programs across a hybrid ecosystem, including complex web applications, Agentic AI solutions, cloud-native solutions, enterprise GIS platforms, and low-code/no-code pattern creation.
Experience in regulated environments such as financial services, healthcare, government, or payments.
Experience conducting or coordinating penetration testing and converting findings into durable architectural improvements.
Experience implementing DevSecOps programs and security automation at scale.
Familiarity with privacy engineering, data classification, and compliance frameworks.
Experience with security architectures in Esri ArcGIS platforms.

Recruitment Notice

All IT Solutions LLC is a staffing and technology services company and may receive fees or compensation from client organizations for recruiting, staffing, placement, or workforce services. Candidates are never charged an application, recruitment, placement, or interview fee by All IT Solutions LLC. Any commercial rates, fees, or staffing arrangements are between All IT Solutions LLC and its clients and do not require payment from the candidate.

View full job page →

1mo ago

Principal Cloud Security Engineer

Rocket Lab Corporation Long Beach, CA

Long Beach, CA

1mo ago Closed

$152k - $165k/yr Full time Aws Security Azure Security Cloud

This position is no longer accepting applications (closed Oct 17, 2026).

Job Description

The Principal Cloud Security Engineer will help secure Rocket Lab’s cloud footprint across vendor services, code pipelines, and automation. This onsite role in Long Beach, CA focuses on building and maintaining security controls, performing risk-focused assessments, and supporting IAM, compliance, incident response, and DevSecOps/MLOps practices.

Role Focus

Own the design, development, and ongoing maintenance of security controls for hybrid cloud environments, spanning IaaS, PaaS, SaaS, and FaaS. Partner with teams across development and operations to reduce risk in public cloud deployments, CI/CD pipelines, and agentic systems while strengthening overall security posture.

Responsibilities

Design, implement, and maintain security controls for hybrid cloud-based environments, including IaaS, PaaS, SaaS, and FaaS solutions.
Design and develop custom automation aligned with the cyber team objectives.
Provide security support for internal and external design reviews related to security.
Conduct security assessments and risk analyses to identify vulnerabilities and develop mitigation strategies for automated infrastructure such as public cloud, CI/CD pipelines, and agentic systems.
Collaborate with Infrastructure Operations to implement and manage identity and access management (IAM) solutions for controlling access to cloud resources and applications.
Develop documentation, plans, and proofs of concept for cybersecurity-related platform improvements.
Configure and monitor cloud security tools and services.
Collaborate with development teams to integrate security best practices into the software development lifecycle (SDLC), DevOps, and MLOps processes.
Maintain systems to stay current on emerging threats, vulnerabilities, and DevSecOps/MLOps industry best practices, and recommend proactive measures to enhance security posture.
Provide guidance and support to internal teams on security-related matters, including incident response, compliance, and security awareness training.
Participate in regular security audits, assessments, and compliance reviews to ensure adherence to regulatory requirements and industry standards.

Requirements

12+ years of experience in scripting languages (for example: Bash, PowerShell, Python) and configuration management and infrastructure as code tools (for example: Puppet, Ansible, Terraform).
Bachelor’s degree or equivalent years of work experience (16+ years of total work experience).
Proven experience in cloud security architecture, design, and implementation across major cloud platforms (AWS, Azure, Google Cloud).
Hands-on experience with cloud security tools and services, such as AWS Security Hub, Azure Security Center, and Google Cloud Security Command Center.
Experience operating within US Government compliance regimes, including CMMC, NIST, and DISA STIG, along with ITIL/Change Review systems.
Proficiency in vulnerability management systems (for example: Tenable, Bringa) and CLI scanning tools (for example: Trivy, OpenSCAP).
Extensive experience with git-driven version control systems (for example: GitHub, GitLab, Bitbucket).
Strong understanding of networking concepts, encryption techniques, and secure communication protocols.
Experience with databases (for example: PostgreSQL, SQLite) and data formats (for example: Parquet, Arrow).
Proficiency in analytics systems (for example: PowerBI, Jupyter) and vendor-agnostic assessment engines (for example: Cloud Custodian, Panther).
U.S. citizenship is required due to program requirements.

Nice to Have

Advanced degree in computer science, information technology, cybersecurity, or equivalent career experience.
Involvement with community cybersecurity organizations.
Experience with AWS GovCloud / Azure GCC High.
Experience with CI/CD pipeline security.
Experience with Tier 2 cloud vendors.
Experience with hybrid cloud engineering.
Experience with SAST and DAST testing.
Experience with secrets management tools such as vaults and HSMs.
Experience with cloud incident response and forensics.
Experience with log aggregators such as Graylog, ELK, or Splunk.

Technologies

Bash, PowerShell, Python, Puppet, Ansible, Terraform
AWS, Azure, Google Cloud
AWS Security Hub, Azure Security Center, Google Cloud Security Command Center
CMMC, NIST, DISA STIG, ITIL
Tenable, Bringa, Trivy, OpenSCAP
GitHub, GitLab, Bitbucket
PostgreSQL, SQLite, Parquet, Arrow
PowerBI, Jupyter, Cloud Custodian, Panther
IaaS, PaaS, SaaS, FaaS, CI/CD, SDLC, DevOps, MLOps, DevSecOps, IAM

Compensation and Location

Location: Long Beach, CA (onsite)
Salary: USD 152,300 - 165,000 per year

Additional Information

For US offices: Rocket Lab employees must be a U.S. citizen, lawful U.S. permanent resident (current Green Card holder), lawfully admitted into the U.S. as a refugee or granted asylum, or eligible to obtain required authorizations from the U.S. Department of State and/or the U.S. Department of Commerce, as applicable.
Reasonable accommodation requests for the application/interview process in the United States should be directed to Giulia Johnson at g.biow@rocketlabusa.com.
A response to your request may take up to two business days.
For New Zealand offices: background checks will be undertaken prior to employment offers, including nationality checks, due to eligibility requirements tied to equipment and data regulated by the United States' International Traffic in Arms Regulations.
Under those regulations, eligibility may be limited based on citizenship or ineligible dual citizenship or nationality.

View full job page →

Azure Security Cybersecurity Jobs

Cybersecurity Engineer

Application Security Architect

Principal Cloud Security Engineer

Get Azure Security Cybersecurity Jobs alerts