Azure Cloud Security Lead

Role & Responsibilities:

• Lead cloud security architecture reviews, security assessments, and requirement definitions for complex product environments.
• Conduct threat modeling, code reviews, security testing, vulnerability detection, and provide remediation strategies.
• Deploy and secure containers, container orchestration platforms, and service mesh technologies (EKS, K8S, ISTIO).
• Serve as primary liaison between business units, IT, product management, and group cybersecurity teams.
• Manage and maintain enterprise information protection services and technology portfolio.
• Ensure regular maintenance and timely upgrades of security systems to prevent downtime and enhance performance.
• Accountable for Security Incident Management, including incident response procedures and playbooks.
• Monitor and review security events and cyber threat landscape, coordinating with SOC & MSS teams.
• Manage resolution of cybersecurity incidents and coordinate with engineering support for security systems.
• Identify, diagnose, and remediate potential threats, including root cause analysis and after-action reviews.
• Collect and analyze cybersecurity threats to understand attacker tactics, techniques, and procedures (TTPs).
• Proactively detect undetected threats, identify indicators of compromise (IOCs), and recommend mitigation strategies.

Reporting & Documentation:

• Develop and streamline security operations processes and procedures.
• Provide regular reports and metrics on security operations.
• Conduct routine audits on infrastructure security and present findings.
• Lead periodic service review meetings with internal and external stakeholders.
• Ensure adherence to organizational security controls, standards, and policies.

Preferred Candidate Profile:

• Extensive experience (10+ years) in Azure cloud security and enterprise security operations.
• Strong understanding of container security, cloud orchestration, and modern cybersecurity frameworks.
• Proven expertise in threat modeling, incident management, and vulnerability remediation.
• Ability to communicate complex security challenges to leadership and business teams.
• Hands-on experience coordinating with SOC, MSS teams, and cross-functional stakeholders.