Truist Bank-posted 2 days ago
$95,000 - $115,000/Yr
Full-time • Mid Level
Onsite • Charlotte, NC
5,001-10,000 employees

An Azure Cybersecurity Engineer is responsible for designing, implementing, and managing security solutions for cloud environments built on Microsoft Azure. With 5–7 years of professional experience, this engineer will leverage deep expertise in cloud security principles and hands-on exposure to complex Azure infrastructures. The ideal candidate will safeguard corporate data, ensure regulatory compliance, and proactively mitigate emerging threats in a rapidly evolving technical landscape. This position is 5 Days a week in the office in Charlotte, Atlanta, Raleigh or Richmond VA.

  • Security Architecture & Design Develop and implement robust security architectures for Azure-based systems, including designing secure network boundaries, identity solutions, and multi-layered defense mechanisms. Collaborate with cross-functional teams to integrate security requirements into software development lifecycles and cloud migrations. Evaluate and recommend security tools and frameworks tailored to business needs and regulatory requirements.
  • Threat Management & Incident Response Monitor Azure environments for suspicious activity using native tools (Azure Security Center, Sentinel, Log Analytics) and third-party solutions. Lead rapid response to security incidents, managing investigation, containment, eradication, and recovery efforts. Conduct root cause analysis and develop strategies to prevent recurrence of security incidents.
  • Identity & Access Management (IAM) Administer Azure Active Directory, implementing least-privilege principles, conditional access policies, and multi-factor authentication. Oversee provisioning, review, and de-provisioning of user accounts, service principals, and managed identities. Establish and maintain RBAC (Role-Based Access Control) models across Azure resources.
  • Data Protection & Compliance Design and implement data encryption strategies for data at rest and in transit, using Azure Key Vault and managed HSM. Monitor compliance with regulations such as GDPR, HIPAA, and PCI-DSS, mapping Azure services to frameworks and reporting on gaps. Conduct regular security assessments, vulnerability scans, and penetration testing of cloud assets.
  • Cloud Security Operations Automate security processes with Azure PowerShell, Azure CLI, and ARM/Bicep templates. Configure, tune, and manage security monitoring and alerting systems. Produce dashboards and reports on security posture, risk assessments, and action plans for senior stakeholders.
  • Security Awareness & Collaboration Educate internal teams on cloud security best practices, offering training and guidance on new threats and technologies. Act as a key liaison between IT, development, and compliance departments to ensure security is embedded in all Azure initiatives. Participate in internal and external audits, preparing documentation and evidence for review.
  • Design and implement secure Azure solutions for new initiatives and migrations.
  • Conduct periodic risk assessments and prepare recommendations for improving the security posture of Azure environments.
  • Investigate and remediate security vulnerabilities in cloud infrastructure and applications.
  • Deploy and configure advanced monitoring solutions such as Azure Sentinel and integrate with SIEM systems.
  • Review and enhance policies for identity management, access control, and data governance.
  • Develop and maintain disaster recovery plans and business continuity procedures specific to Azure deployments.
  • Collaborate with DevOps and Application Security teams to implement secure SDLC practices in CI/CD pipelines.
  • Support internal audits and external compliance reviews, providing necessary documentation and remediation plans.
  • Bachelor’s degree and five years of experience in systems engineering or administration or an equivalent combination of education and work experience
  • In-depth knowledge in applied enterprise information security technologies including but not limited to firewalls, intrusion detection/prevention systems, network operating systems, identity management, database activity monitoring, encryption, content filtering, and Mainframe security
  • Previous experience in planning and managing IT projects
  • 5–7 years of professional experience in security engineering, with at least 3 years focused on Azure cloud environments.
  • Strong knowledge of Azure cloud services, architecture, and best practices for securing cloud-native workloads.
  • Expertise in security frameworks (NIST, CIS, ISO 27001) and regulatory compliance requirements.
  • Hands-on experience with Azure Security Center, Azure Sentinel, Azure Active Directory, and other native security tools.
  • Proficiency in scripting languages (PowerShell, Python, Bash) and infrastructure-as-code tools (ARM, Bicep, Terraform).
  • Solid understanding of networking principles, firewalls, VPNs, and hybrid connectivity in Azure.
  • Demonstrated ability to manage security operations, incident response, and vulnerability management in cloud environments.
  • Relevant certifications (e.g., Microsoft Certified: Azure Security Engineer Associate, CISSP, CISM, CCSP) are highly desirable.
  • Ability to anticipate threats, analyze complex technical problems, and develop effective solutions.
  • Skilled in presenting technical concepts to non-technical audiences and producing clear documentation.
  • Experience managing multiple security projects concurrently and delivering results on schedule.
  • Eagerness to stay current with evolving technologies and security trends within the Azure ecosystem.
  • Effective working both independently and in cross-functional teams, fostering a culture of security-first thinking.
  • Truist offers medical, dental, vision, life insurance, disability, accidental death and dismemberment, tax-preferred savings accounts, and a 401k plan to teammates.
  • Teammates also receive no less than 10 days of vacation (prorated based on date of hire and by full-time or part-time status) during their first year of employment, along with 10 sick days (also prorated), and paid holidays.
  • Depending on the position and division, this job may also be eligible for Truist’s defined benefit pension plan, restricted stock units, and/or a deferred compensation plan.
© 2024 Teal Labs, Inc
Privacy PolicyTerms of Service