Lead I - Software Engineering

Role description

What will you be responsible for?

As a Cybersecurity Principal Cloud Security Engineer, you will be responsible to design, implement, and own the security posture of Azure Tenant including:

Own Azure tenant security posture, including subscriptions, management groups, landing zones, and cloud resource lifecycle.

Design and enforce Azure guardrails using Azure Policy and Policy Initiatives aligned to enterprise standards.

Define and govern RBAC models, PIM, managed identities, and service principals across tenants.

Implement and operationalize policy controls for tagging, regions, SKUs, encryption, and data residency.

Lead deployment and operations of Microsoft Defender for Cloud (CSPM/CWPP) across IaaS, PaaS, AKS, and containers.

Own SIEM data connectors, analytics rules, UEBA, threat intelligence enrichment, and automation playbooks.

Drive detection engineering, threat hunting enablement, and MTTR reduction in partnership with SOC teams.

Lead implementation and day‑to‑day operations of enterprise security platforms: CrowdStrike, Proofpoint, Rapid7, Wiz

Establish and govern secure Azure network architectures, including hub‑spoke/vWAN, Private Endpoints, Firewall, WAF, DDoS, NSGs, and ASGs.

Implement Policy as Code and Security Baselines as Code using GitOps and IaC practices.

Embed cloud and security controls into CI/CD pipelines to enable shift‑left and continuous compliance.

Maintain the enterprise cloud risk register and report security KPIs, trends, and risks to leadership.

Map and operationalize security controls against CIS, ISO 27001, SOC 2, HIPAA/HITRUST, enabling continuous evidence collection.

Lead incident response runbooks, purple‑team control validation, and post‑incident remediation for cloud threats.

Partner cross‑functionally with platform, infra, app, risk, compliance, and audit teams to ensure secure cloud adoption at scale.

(Nice to Have) Experience with Application Security practices and tools (e.g., Checkmarx for SAST/DAST/SCA) and integrating AppSec signals into cloud risk and SIEM workflows.

What would your day look like?

Partner daily with Engineering, Network, and Platform teams to design, review, and operate a secure, compliant Azure cloud and data platform.

Act as a security authority on architecture and design reviews, shaping approved Azure, network, identity, and application patterns.

Oversee SIEM operations in partnership with Global Cyber SOC teams to gather threat visibility, reviewing detections, tuning rules, and guiding response for high‑risk security events.

Collaborate with security vendors and partners (CrowdStrike, Proofpoint, Rapid7, Wiz) on platform health, detections, and remediation outcomes.

Define and refine security SOPs, mentor L1/L2 teams, and ensure consistent triage, escalation, and incident handling.

Drive delivery of security initiatives and improvements through sprints, balancing hands‑on execution with architectural direction and stakeholder alignment.

Who are we looking for?

10+ years of cybersecurity experience with 5+ years focused on Azure cloud security architecture.

Deep hands‑on experience designing and operating Azure identity and access security, including Azure RBAC, Microsoft Entra ID, Conditional Access, PIM/PIM for Groups, and Identity Governance.

Strong operational experience with enterprise security platforms, including CrowdStrike, Proofpoint, Rapid7, Wiz, and Microsoft Defender for Cloud.

Proven expertise in SIEM/SOAR engineering, with hands‑on experience building and operating Microsoft Sentinel analytics, UEBA, automation playbooks, and threat integrations.

Demonstrated success delivering Azure Landing Zones aligned to Microsoft Cloud Adoption Framework (CAF) and Well‑Architected Framework security principles.

Strong understanding of identity federation and integrations, including SAML, OAuth2/OIDC, SCIM provisioning, and B2B scenarios.

Solid experience securing network and platform controls, including Azure Firewall, WAF, Private Endpoints, and Zero Trust architectures.

Automation‑first mindset with hands‑on skills in PowerShell, Python, Terraform, Bicep, Git, YAML, and CI/CD driven security enforcement.

(Nice to Have) Experience in Application Security, including SAST, DAST, SCA (e.g., Checkmarx), and embedding AppSec controls into CI/CD pipelines.

Skills

cloud security,incident response,identity and access management,google cloud platform,

About UST

UST is a global digital transformation solutions provider. For more than 20 years, UST has worked side by side with the world’s best companies to make a real impact through transformation. Powered by technology, inspired by people and led by purpose, UST partners with their clients from design to operation. With deep domain expertise and a future-proof philosophy, UST embeds innovation and agility into their clients’ organizations. With over 30,000 employees in 30 countries, UST builds for boundless impact - touching billions of lives in the process.