Senior Security Engineer - Azure Security

-

Core Specialty is seeking a Senior Azure Cyber Security Engineer to serve as a hands-on technical leader and subject matter expert within the Cyber Security Engineering function.

This is a senior individual contributor role with no direct reports, focused on designing, implementing, and operating security controls across Azure, identity, endpoint, cloud application, and network security domains.

This role operates in a fast-paced, high-volume environment with a broad and evolving security landscape.

The ideal candidate is comfortable balancing strategic security initiatives with day-to-day operational engineering work, operates with minimal direction, and proactively identifies gaps, proposes solutions, and executes with a strong sense of ownership.

The selected candidate will be required to work a hybrid schedule (3 days in office/2 remote) out of our Dallas, TX, or Cincinnati, OH office.

No relocation assistance is being offered with this role.

Key Accountabilities/Deliverables:

Cloud Security Engineering & Program Maturation


* Serve as a senior technical contributor driving the maturation of Core Specialty’s Azure security posture


* Identify gaps in cloud security controls, define remediation approaches, and deliver measurable improvements


* Act as a technical escalation point for complex security engineering challenges and incidents


* Partner with IT, GRC, and business stakeholders to align security engineering solutions with risk objectives


* Balance work across multiple concurrent projects and BAU (business-as-usual) security operations

Azure Security & Policy Engineering


* Design, implement, and manage Azure Policy definitions, initiatives, and assignments to enforce security baselines and regulatory requirements


* Engineer and maintain security configurations across Azure services, including Azure Firewall, Network Security Groups (NSGs), Key Vault, and Microsoft Defender for Cloud


* Develop and operationalize monitoring, alerting, and remediation workflows for Azure policy non-compliance

Cloud Application Security


* Define and enforce cloud application security policies using Microsoft Defender for Cloud Apps (MDCA)


* Implement Conditional Access App Control for real-time session enforcement across SaaS applications


* Establish cloud application risk scoring, usage policies, and data exfiltration controls


* Partner with business units to assess and onboard new cloud applications with appropriate security guardrails

Identity & Access Management


* Architect and manage Microsoft Entra ID (Azure AD) security configurations, including: Conditional Access, Privileged Identity Management (PIM), Access reviews and identity governance, Role-based access control (RBAC)


* Govern identity lifecycle and entitlement management across Azure and integrated SaaS platforms


* Support identity security governance in AWS IAM, including federation and cross-cloud identity...