Azure Security - Contractor

HRM Search Partners is currently hiring an Azure Security Contractor on a contract basis on behalf of a leading utilities organisation.

In this role, you will join the Cyber Pillar to lead the dedicated Enhance Azure Security stream, driving the continuous elevation of the organization's cloud security posture. Working closely with cross-functional cybersecurity, cloud, and IT engineering teams, you will be responsible for assessing, designing, operationalising, and documenting Azure security configurations and processes, ensuring alignment with industry standards and enterprise best practices.

Key Responsibilities

Cloud Security Posture & Architecture

• Assessment & Alignment: Assess current Microsoft Defender for Cloud configurations and recommend changes in line with industry standards and internal best practices.
• CSPM Management: Analyse, prioritise, and remediate Microsoft Defender Cloud Security Posture Management (CSPM) recommendations and attack surfaces.
• Security Benchmarking: Collaborate with the Cloud team to implement the Microsoft Cloud Security Benchmark with actionable controls and policies.
• Architecture Alignment: Work alongside the Cloud & Application Engineering team to ensure security designs strictly align with enterprise best practices.

Identity & Vulnerability Management

• Access Control: Assess Azure Role-Based Access Control (RBAC) and Privileged Identity Management (PIM) usage, partnering with the Identity and Access Management (IAM) team to implement recommended enhancements.
• Vulnerability Management: Collaborate with the Threat and Vulnerability Management team to design and refine cloud-specific vulnerability management processes.

Threat Detection, Response & Change Management

• Alerting & Response: Work with the Threat Detection and Response (TDR) team to establish appropriate security alerting mechanisms and Incident Response plans.
• Safe Delivery: Strictly follow organizational Change Management processes to ensure zero service disruption during security remediations and configuration updates.

Operationalisation, Governance & Knowledge Transfer

• Process Development: Develop and operationalise Azure Platform Security governance, exception handling, ongoing posture management, and TDR workflows.
• Target Operating Model: Define Roles & Responsibilities, operationalise Defender for Cloud, and transition key responsibilities to relevant operational teams.
• Documentation & Training: Create comprehensive technical documentation for Defender for Cloud configurations and processes, conducting effective knowledge transfer to the Cloud & Application Engineering team.
• Project Delivery: Partner with the Project Manager to ensure effective project planning, tracking, and execution aimed at continually elevating overall cloud security posture.

Knowledge, Skills, and Experience

• Defender for Cloud Expertise: Proven hands-on experience deploying and configuring Microsoft Defender for Cloud (including CSPM and Defender workload protection plans) within Azure environments.
• Remediation Leadership: Demonstrated track record of remediating cloud security recommendations and successfully guiding IT/Engineering teams through configuration fixes.
• Benchmark Implementation: Hands-on experience implementing and managing the Microsoft Cloud Security Benchmark.
• Operations & Governance: Strong background in operationalising and documenting enterprise cloud security processes.
• Communication: Excellent interpersonal, verbal, and written communication skills with the ability to deliver clear, structured technical presentations to diverse stakeholders.
• Documentation: Outstanding technical writing skills with a keen focus on clarity, process mapping, and architecture layout.

Desirable Criteria

• Experience managing, configuring, and provisioning native Microsoft Azure core resources.
• Hands-on experience integrating Microsoft Defender for Cloud with Microsoft Sentinel (SIEM/SOAR).
• Strong familiarity with broader ITIL and enterprise cloud operations workflows.

Contact [email protected] directly with your CV and contact details.