We are seeking an Associate Consultant specializing in Cloud Endpoint Security for our Bengaluru office. This role involves implementing and managing advanced security solutions within Azure environments. You will be instrumental in safeguarding cloud infrastructure by leveraging Microsoft Defender for Cloud, Microsoft Sentinel, and adopting Zero Trust principles. The position requires a proactive approach to threat detection, incident response, and the design of secure, scalable Azure architectures.
Key responsibilities include developing Infrastructure as Code (IaC) using Terraform, configuring robust network security controls, and ensuring compliance with industry best practices and Microsoft's Cloud Adoption Framework. You will collaborate with teams to enhance security posture, conduct threat modeling, and support ongoing security assessments and improvements. This is an excellent opportunity for a motivated individual to contribute to cutting-edge cloud security initiatives in a dynamic consulting environment.
Key Responsibilities:
- Implement and manage security monitoring solutions, including Microsoft Defender for Cloud and Microsoft Sentinel.
- Monitor, investigate, and respond effectively to cloud security incidents and emerging threats.
- Design and support secure Azure network architectures, with a focus on Hub-Spoke models.
- Configure critical Azure networking components such as Azure Firewall, NSGs, ASGs, Private Endpoints, and Service Endpoints.
- Build and maintain Azure Landing Zones, adhering to the Microsoft Cloud Adoption Framework (CAF) guidelines.
- Apply Zero Trust principles and cloud security best practices across all Azure environments.
- Conduct comprehensive threat modeling using frameworks like STRIDE and MITRE ATT&CK.
- Implement Azure Policies, ensure compliance controls, and uphold security governance standards.
- Develop and deploy Infrastructure as Code (IaC) solutions utilizing Terraform.
- Support security assessments, facilitate remediation activities, and drive continuous cloud security improvements.
Required Skills and Qualifications:
- Demonstrated strong experience in Azure cloud security and Azure infrastructure services.
- Hands-on proficiency with Terraform and a solid understanding of Infrastructure as Code (IaC) practices.
- Good knowledge of Microsoft Defender for Cloud, Microsoft Sentinel, and familiarity with SIEM and SOAR solutions.
- Understanding of core Azure networking concepts including VNets, NSGs, ASGs, and Azure Firewall.
- Familiarity with Azure Landing Zones and the Microsoft Cloud Adoption Framework (CAF).
- Knowledge of threat modeling, incident investigation, and log analysis techniques.
- Exposure to PowerShell scripting and Zero Trust concepts is highly advantageous.
- Excellent analytical, troubleshooting, and communication skills.
- Bachelor's degree in Computer Science, Information Technology, Engineering, or a related field.
