Conduct penetration tests against Azure and M365 environments
Simulate real‑world attacker techniques, including credential theft, token abuse, privilege escalation, lateral movement, and persistence within Azure and M365 environments
Validate security controls implemented across Defender for Cloud, Defender for Identity, Defender for Endpoint, and Sentinel detection pipelines
Assess identity attack surfaces
Produce clear, professional penetration test reports
Work closely with Security Operations teams, Cloud engineering teams, and GRC teams
Stay current on emerging Azure attack techniques and contribute to internal penetration testing methodologies
Requirements
Minimum 5 years of professional penetration testing or offensive security experience
Strong hands‑on experience testing Microsoft Azure and Microsoft 365 environments
Deep understanding of Azure AD and Entra ID security models
Proficiency with common penetration testing tools and techniques, including PowerShell, Azure CLI, Graph API, and cloud‑specific testing frameworks
Strong knowledge of networking fundamentals, identity protocols, and authentication flows
Demonstrated ability to write high‑quality technical and executive‑level reports