[Hiring] Cloud Security Engineer @DLB Associates

Role Description

The Cloud Security Engineer is responsible for the hands-on implementation, configuration, and ongoing management of security controls across ai2io’s Microsoft 365 and Azure environments. Working under the direction of the Information Security Manager, this role translates security strategy and architecture decisions into operational reality across a multi-tenant managed services environment.

• Implements and maintains security controls across Microsoft Defender, Purview, Entra ID, Intune, and Azure services.
• Remediates security gaps identified through risk assessments, vulnerability scans, compliance audits, and stakeholder security reviews.
• Supports security operations by tuning alerts, building automation, developing runbooks, and providing Tier 2–3 incident response support.
• Collaborates with the Rapid7 MDR team to ensure effective detection coverage, incident escalation, and agent health across all managed environments.
• Assists in maintaining compliance with organizational security standards and applicable frameworks (NIST CSF, CIS Benchmarks, SOC 2).

Qualifications

• Hands-on experience with Microsoft Defender suite (Endpoint, Identity, Office 365, Cloud Apps) including policy configuration, alert tuning, and incident investigation.
• Experience with Entra ID (Azure AD) including Conditional Access, PIM, RBAC, and application registrations.
• Experience with Microsoft Intune for endpoint management, compliance policies, and configuration profiles.
• Experience with Microsoft Purview controls including DLP, sensitivity labels, and retention policies.
• Experience with Azure security services including Azure Policy, network security groups, Key Vault, and Azure Monitor.
• Experience with vulnerability management or MDR platforms, preferably Rapid7 InsightVM/InsightIDR, including agent deployment and scan configuration.
• Demonstrated understanding of endpoint hardening principles including CIS Benchmarks and Intune security baseline implementation.
• Scripting capability (PowerShell preferred) for automation and administrative tasks.
• Ability to work across multiple Microsoft 365 tenants simultaneously and maintain consistent configurations.
• Strong troubleshooting and analytical skills with the ability to investigate and resolve complex security issues.
• Clear written and verbal communication skills, including the ability to document procedures and explain technical issues to non-technical stakeholders.
• Ability to manage multiple priorities and coordinate remediation activities across teams.
• Ability to work effectively both independently and as part of a small, collaborative security team.

Requirements

• Up to 5% travel, which may include travel to any or all 50 US states.
• Travel is defined as physically leaving home on behalf of business activities including but not limited to client sites, meetings with other employees, meetings for business development purposes, running errands on behalf of the business, attending industry conferences, etc.

Education / Experience Requirements

• Bachelor’s degree in Information Technology, Computer Science, Cybersecurity, or related discipline; or equivalent combination of education and experience.
• 3–5 years of hands-on experience in information security, cloud security, or security engineering with a focus on Microsoft 365 and Azure environments.
• Microsoft Security certifications preferred (SC-200, SC-300, SC-400, or AZ-500).

Benefits

• Choice of comprehensive medical plans (including two PPO-style plans and a HDHP w/ HSA option).
• Flex spending accounts (FSA).
• Dental and vision plans.
• Comprehensive medical, dental and vision benefits extended to spouse/domestic partner and dependent children up to age 26.
• 401k with company match and self-directed brokerage account option.
• PTO including additional paid time off during the last week of the year.
• Company paid life insurance coverage for employees and their eligible dependents.
• Short and long-term disability, AD&D coverage.
• Professional development opportunities, tuition reimbursement, and professional licensing assistance.
• Paid parental leave after one year of employment.