Experience: 10+ Years
Visa: EAD, L2, E2, TN, (No H1B & OPT)
Job Description:
Provide senior hands-on technical expertise to support Azure cloud security, Web Application Firewall (WAF) engineering, container security, vulnerability management, and Continuous Threat Exposure Management (CTEM). Focus on maintaining security controls, identifying and validating exposures, troubleshooting technical issues, and supporting remediation across enterprise infrastructure, applications, and cloud environments.
Core Responsibilities
Azure Cloud Security Engineering: Provide technical support for Azure security services, including Microsoft Defender for Cloud, Azure Policy, Azure Firewall, Network Security Groups (NSGs), Azure Key Vault, Azure Private Link, Azure Monitor, and cloud workload protection. Troubleshoot security configurations, network access controls, cloud permissions, and security posture findings.
Web Application Firewall (WAF) Engineering: Provide advanced hands-on support for WAF technologies, including Azure Application Gateway WAF, Azure Front Door WAF, and other enterprise WAF platforms. Configure and tune WAF rules, investigate blocked requests and false positives, analyze HTTP traffic, support OWASP Top 10 protections, troubleshoot application access issues, and respond to web application attacks.
Container and Kubernetes Security: Support security controls across Azure Kubernetes Service (AKS), Azure Container Registry (ACR), and cloud workloads. Perform container image vulnerability assessments, review runtime security findings, troubleshoot Kubernetes security configurations, and support remediation.
Vulnerability Management: Support enterprise vulnerability management using Qualys VMDR and Microsoft Defender Vulnerability Management. Perform vulnerability scanning, asset discovery, configuration assessments, vulnerability validation, remediation tracking, and technical troubleshooting across endpoints, servers, network devices, and cloud workloads.
Continuous Threat Exposure Management (CTEM): Execute technical exposure assessments, evaluate attack paths, validate exploitable vulnerabilities, and prioritize remediation using asset criticality, exploitability, and business impact.
Microsoft Security Exposure Management: Support Microsoft Defender Vulnerability Management, Microsoft Security Exposure Management, Defender for Endpoint, and Defender for Cloud. Analyze exposure data, attack paths, asset relationships, security recommendations, and configuration weaknesses.
CrowdStrike Falcon Cloud Security Complete: Provide hands on technical support for CrowdStrike Falcon Cloud Security Complete, including server and cloud workload protection, container security, and Cloud Native Application Protection Platform (CNAPP) capabilities. Support both proactive cloud security posture assessments and runtime threat detection and protection. Investigate cloud security findings, troubleshoot integrations, and support remediation.
Cloud Security Posture and Workload Protection: Support Cloud Security Posture Management (CSPM), Cloud Workload Protection (CWPP), Cloud Infrastructure Entitlement Management (CIEM), and CNAPP capabilities. Investigate Azure resource misconfigurations, excessive permissions, workload vulnerabilities, container security findings, and cloud attack paths.
Remediation Validation and Technical Support: Work with infrastructure, cloud, networking, and application teams to investigate security findings, troubleshoot WAF and cloud security issues, validate remediation, and support vulnerability exception reviews.
Security Automation and Integration: Use PowerShell, Python, KQL, Azure CLI, REST APIs, and scripting to automate security assessments, WAF configuration analysis, vulnerability reporting, and integrations with Qualys, Microsoft Defender, CrowdStrike Falcon, and ServiceNow.
Required Technical Experience
7+ years of hands-on cloud security engineering, vulnerability management, or security operations experience.
Deep technical expertise with Microsoft Azure security services, including Defender for Cloud, Azure Firewall, Azure Policy, NSGs, Azure Key Vault, and Azure networking security.
Strong hands on WAF engineering experience, including Azure Application Gateway WAF, Azure Front Door WAF, custom rule configuration, traffic analysis, false positive tuning, and troubleshooting.
Hands on experience with CrowdStrike Falcon Cloud Security Complete, including server and cloud workload protection, container security.
