Cloud Security Engineer

Patch My PC provides enterprise solutions that help IT and security teams automate, manage, deploy, and report on third-party software updates. The Cloud Security Engineer will build and operate Microsoft cloud security and compliance controls, assess threats and weaknesses, support monitoring and incident response, and advise internal teams and customers on security posture.

Responsibilities:

• Design, deploy, configure, and maintain Microsoft cloud security and compliance technologies, including Microsoft Purview, Microsoft Defender for Cloud, Azure Log Analytics, Microsoft Entra ID, Privileged Identity Management (PIM), and Identity Governance
• Engineer and continuously improve technical security controls across Microsoft 365 and Azure
• Automate recurring security and compliance tasks to reduce manual effort and drift
• Monitor security and compliance posture, and drive continuous-improvement initiatives with measurable outcomes
• Build, deploy, and maintain Data Loss Prevention (DLP) policies across the organisation
• Monitor AI technology usage and engineer controls to mitigate data exposure, information leakage, and inappropriate use
• Assess emerging AI-related threats and implement appropriate governance and technical guardrails
• Partner with internal teams to ensure sensitive data is adequately protected
• Apply a red-team mindset to proactively identify weaknesses in systems, configurations, processes, and controls
• Conduct security reviews, exposure assessments, and control-effectiveness evaluations
• Produce clear, concise reports for leadership covering findings, risk assessments, control gaps, and prioritized remediation recommendations
• Track remediation and support stakeholders in implementing corrective actions
• Use Azure Log Analytics and security tooling (e.g., KQL queries, alerting) to detect suspicious activity, trends, and compliance issues
• Support security investigations and incident response, including analysis, containment, and remediation recommendations
• Represent security and compliance in customer calls covering governance, data protection, and control topics
• Support the compliance team on customer questionnaires, assessments, and security reviews
• Communicate technical concepts effectively to both technical and non-technical audiences

Requirements:

• 7+ years of hands-on experience engineering and operating Microsoft cloud security technologies: Purview, Defender for Cloud, Azure Log Analytics, Entra ID, PIM, Identity Governance, and DLP
• Solid understanding of cloud security principles and Microsoft 365 / Azure security controls
• Experience investigating security risks and identifying control weaknesses
• Strong analytical and problem-solving skills, with the ability to think from an attacker's perspective
• Excellent written communication, able to produce professional reports and executive summaries
• Strong presentation and customer-facing communication skills
• Able to work independently in a remote setting while collaborating with distributed teams
• To be eligible for consideration, candidates for fully remote positions must reside in one of the following U.S. states at the time of hire:

AL, AK, AR, AZ, CA, CO, CT, DE, FL, GA, HI, IA, ID, IL, IN, KS, KY, LA, ME, MI, MN, MO, MS, MT, NC, ND, NE, NH, NJ, NM, NV, OH, OK, PA, RI, SC, SD, TN, TX, UT, VA, WA, WI, WV, WY

• Comfort writing queries (e.g., KQL) and automating tasks (PowerShell, Graph API, or similar)
• Microsoft security certifications (SC-200, SC-300, SC-400, AZ-500, or equivalent)
• Experience with compliance frameworks such as ISO 27001, SOC 2, GDPR, or similar
• Experience with security governance, risk, and compliance (GRC) programmes
• Exposure to AI governance, security, or responsible-AI initiatives
• Experience as a consultant in Configuration Manager, Intune and other related technologies
• Experience at leading customer focused workshops