| Skill | Required / Desired | Amount | of Experience |
| Enterprise Cloud Experience | Required | 8 | Years |
| Enterprise Cloud Security Experience | Required | 5 | Years |
| Candidate must be highly experienced as a cloud security professional with strong hands-on expertise in cloud infrastructure and cloud engineering | Required | | |
| Candidatte must be highly experienced in cybersecurity, networking, identity, security operations, and have a deep cloud engineering competency | Required | | |
| Candidate must have in-depth experience moving between strategic architecture and hands-on engineering and identifying security risks | Required | | |
| Candidate must have in-depth experience designing practical solutions, implementing controls, and working with infrastructure teams | Required | | |
| Candidate musth have in-depth experience working with application teams to continuously improve the organization's cloud security posture | Required | | |
| Candidate must have experience setting up Network Security Groups (NSGs), resource manager and management groups, monitor and log analytics, | Required | | |
| Candidate must have experience setting up Azure Firewall, Azure WAF, Azure Monitor, Application Gateways, virtual networks and network segmentation. | Required | | |
| Candidate must have experiences in: Incident response, Security investigations, Log analysis, Threat intelligence, Security monitoring, IOC analysis | Required | | |
| Candidate must have experiences coordinating during cyber incidents | Required | | |
| Candidate must have experience in vulnerability management, remediation tracking, vulnerability scanning tools (e.g. Nessus, Tenable, Defender) | Required | | |
| Candidate must have experience securing enterprise cloud environments and implementing security controls in production environments | Required | | |
| Candidate must have experience with the SIEM products (e.g. Splunk, Microsoft Sentinel, CNAPP), | Required | | |
| Candidate must have experience with log management, security analytics, SOC integration, Threat detection, and Threat hunting | Required | | |
| Candidate must also have hands on expertise validating indexer parsers, leveraging Splunk Query Language for monitoring and data analysis. | Required | | |
| Candidate must have experience collaborating with the security governance team and application leads to implement enterprise log management standards. | Required | | |
| Candidate must have experience with; SEC530, CIS Benchmarks, NIST CSF, NIST 800-53, Zero Trust principles | Required | | |
| Candidate must have experience in cloud vulnerability management, remediation tracking, and risk assessment and prioritization | Required | | |
| Candidate must have experience in cloud risk assessment and prioritization, attack surface management, and Cloud Security Posture Management (VSPM) | Required | | |
| Candidate must have experience in Cloud Workload Protection (CWPP) and Cloud-Native Application Protection Platform (CNAPP) | Required | | |
| Candidate must have experience developing Azure Policy to enforce standardization and compliance with enterprise requirements | Required | | |
| Candidate must have experience creating Azure Automation runbooks to support incident response workflows. | Required | | |
| Candidate must have experience with Identity and access management (IAM), Role-based Access control (RBAC), and Privileged Access Management (PAM) | Required | | |
| Candidate must have experience with Least-privilege access and multi-factor authentication | Required | | |
| Candidate must have experience working in highly regulated environments with large government agencies or similar regulatory environments. | Required | | |
| Candidate must have ability to communicate technical issues to technical, non-techical, and executive audiences. | Required | | |
| Candidate must have ability mentor junior engineers. | Required | | |
| Required: Azure Security Engineer Associate, Security+, Certified Cloud Security Professional certifications | Required | | |
| Preferred: CCSP, Designing Microsoft Azure Infrastructure (AZ-305) | Desired | | |
