ISTARI · 13 hours ago
Senior Cloud Security Engineer
United States
Contract
Remote
Senior Level
7+ years expISTARI is a strategic cybersecurity advisory company focused on building collective resilience in cybersecurity. The Senior Cloud Security Engineer will provide technical expertise in securing cloud platforms, particularly within Microsoft Azure, and will be responsible for designing and operationalizing cloud security controls aligned with Zero Trust principles.
Cloud SecurityConsultingCyber SecurityFinancial ServicesInformation TechnologyInternet of ThingsRisk ManagementVenture Capital
No H1B
Hiring Manager
Mariani Maihadani
Responsibilities
Provide hands-on expertise and architectural guidance across Azure Front Door (AFD), Web Application Firewall (WAF), and Microsoft Defender for Cloud (DFC), ensuring secure configuration and effective policy enforcement
Deliver cloud security architecture advisory for Microsoft Azure, including landing zone governance, network segmentation, identity-centric security, and Zero Trust implementation
Design, develop, and maintain security blueprints and reference architectures for cloud workloads, APIs, and containerised platforms (e.g., Kubernetes, Docker)
Review and strengthen Cloud Security Posture Management (CSPM) and Cloud Workload Protection Platform (CWPP) policies to continuously identify and remediate misconfigurations, vulnerabilities, and policy violations
Engineer and enforce cloud-native security controls, including encryption, key management, secure logging, and monitoring aligned with NIST, CIS benchmarks, and industry best practice
Engineer and enforce the integration of cloud telemetry (audit logs, network flow logs, API activity) into Microsoft Sentinel to enable centralised monitoring, correlation, and detection
Develop and tune cloud-specific detection use cases addressing risks such as privilege escalation, anomalous user behaviour, lateral movement, and data exfiltration
Partner closely with DevOps and Platform Engineering teams to embed security into CI/CD pipelines and enforce secure Infrastructure-as-Code (IaC) patterns
Provide cloud incident response expertise, supporting investigations involving compromised credentials, API abuse, insecure configurations, and advanced cloud-native threats
Produce cloud security posture, compliance, and risk reports, mapping control effectiveness against frameworks such as NIST CSF, ISO 27001, and applicable regulatory requirements (e.g., HIPAA, PCI, GDPR)
Advise on emerging cloud technologies and patterns, including serverless architectures, AI/ML workloads, and cross-cloud governance strategies
Qualification
Required
Bachelor's degree in Computer Science, Information Security, Engineering, or a related discipline (or equivalent practical experience)
7+ years' experience in cybersecurity, with 5+ years focused on cloud security engineering and architecture in Microsoft Azure environments
Strong hands-on experience with Azure security services, including Azure Front Door/WAF, Defender for Cloud, Azure Networking, and Azure Monitor
Proven experience implementing CSPM and CWPP capabilities in enterprise-scale cloud environments
Solid understanding of Zero Trust architecture, cloud identity and access management, and secure networking principles
Familiarity with NIST, CIS, ISO 27001, and cloud security regulatory considerations
Preferred
Microsoft Certified: Azure Security Engineer Associate (AZ-500)
Microsoft Certified: Azure Solutions Architect Expert
CISSP, CCSP, or equivalent cloud/security certifications (preferred, not mandatory)
Company
ISTARI
ISTARI is a Temasek-founded global cybersecurity firm dedicated to helping clients build cyber resilience.
51-200 employees
Funding
Current Stage
Growth StageLeadership Team
Rashmy Chatterjee
Member Board of Directors
Company data provided by crunchbase