Key Responsibilities:

Lead Azure infrastructure security initiatives focused on cloud security posture management and cloud workload protection.

Own design, implementation, optimization, and governance of Microsoft Defender for Cloud for CSPM and CWPP coverage across Azure environments.

Drive secure configuration and continuous posture monitoring across subscriptions, management groups, virtual machines, containers, storage, databases, identity services, network services, and platform components.

Review security recommendations, exposure findings, compliance gaps, and workload alerts and ensure remediation planning with relevant platform teams.

Lead hardening standards, cloud security baselines, control frameworks, and secure implementation guidance for Azure services.

Assess risks related to IAM, excessive permissions, network exposure, encryption gaps, public endpoints, insecure configurations, and weak logging posture.

Ensure protection of workloads including Azure VMs, hybrid servers, containers, Kubernetes environments, application services, databases, and storage workloads.

Collaborate with cloud engineering, platform, DevOps, SOC, and application teams to operationalize cloud security controls and monitoring.

Drive secure score improvement, compliance alignment, and risk reduction initiatives across Azure infrastructure.

Support cloud incident investigations by providing Azure security context, telemetry, findings analysis, and remediation recommendations.

Review onboarding completeness,



policy coverage, alert quality, and control effectiveness across cloud environments.

Define metrics, dashboards, and leadership reports for cloud security posture, remediation, control gaps, and risk trends.

Mentor cloud security engineers and guide implementation of best practices in CSPM and CWPP operations.

Support customer discussions, architecture reviews, and security sign-off for Azure infrastructure security.

Qualification and Work Experience

Qualification: BE / BTech / MCA / MTech (Similar Education Background)

Work experience: 4-12 Years

Candidate should have strong experience in Azure infrastructure security and cloud security operations.

Hands-on experience with Microsoft Defender for Cloud, Azure native security capabilities, CSPM, and CWPP concepts.

Robust understanding of Azure IAM, RBAC, policies, networking, key management, monitoring, logging, storage, compute, and platform services.

Experience in cloud hardening, posture review, control implementation, and remediation governance.

Ability to assess and reduce cloud risk across hybrid and enterprise-scale Azure environments.

Familiarity with cloud compliance frameworks, secure architecture, and operational security monitoring.

Preferred: Experience with Azure Sentinel / SIEM integration, automation, and scripting using PowerShell, Python, or Azure CLI.

Preferred: Certifications such as AZ-500, SC-100, SC-200, CCSP, CISSP, or equivalent.

📌 Infra Security - Azure CSPM & CWPP (Mumbai)
🏢 Outworx Solutions
📍 Mumbai