Security Engineer - Cloud/Appsec

Security Engineer - Cloud/Appsec
£600-£650 p.d
Outside IR35
Occasional Travel to Leeds Office
3 Months + Likely extension
Start Date - ASAP
Key Responsibilities:
Secure Configurations & Compliance Implementation:
Planning and implementation of the Center for Internet Security Microsoft Dynamics 365 Power Platform benchmark.
Planning and implementation of the Center for Internet Security Microsoft 365 Foundations Benchmark.
Collaborating with cloud and DevOps engineers to refactor Terraform code for secure configurations and compliance with the Center for Internet Security Microsoft Azure Foundations Benchmark.
Work with colleagues to raise any required exceptions with Information Security Governance Risk and Compliance so that any associated operational risk is identified, assessed and managed.
Work with Security Operations to onboard Azure Landing Zones into Qualys Total Cloud and address any findings relating to non-compliance.
Auditing configurations in order to plan remediations and verify compliance requirements are met.
SIEM Integration and Configuration for Microsoft Cloud Services:
Configure cloud services and Defender for Cloud for integration with Rapid7 InsightIDR SIEM to enhance security monitoring and incident response capabilities.
Integrate SIEM for monitoring Entra ID sign-in, audit, and risk log categories.
Work with Security Operations to build and test required alert/detection rules
Experience:
Professional experience in cloud security, particularly with Microsoft Azure, Entra ID and Microsoft 365.
Proficiency with Rapid7 InsightIDR, Qualys, and CrowdStrike or similar security operations tools.
Experience in implementing secure configurations, security benchmarks and compliance standards.
Strong understanding of network security and cloud infrastructure.
Familiarity with DevOps practices and toolchains, particularly Azure DevOps, git repositories, build and deployments pipelines, Terraform, Azure CLI and PowerShell.
Familiarity with software development languages and frameworks such as JavaScript, C#, J2EE and .Net.
Excellent problem-solving skills and attention to detail.