Senior Cloud Security Engineer - Azure - Simpson Thacher & Bartlett LLP

Description/Job Summary

The Senior Cloud Security Engineer is responsible for monitoring the IT security infrastructure within the Firm's on prem and Azure cloud environments, articulating technical security requirements, monitoring the effectiveness of the existing IT security controls framework, making recommendations for enhancements, and raising the level of security awareness.  The incumbent will be a part of the security team of engineers that safeguards the infrastructure and information across the Firm worldwide.  This role involves implementation, maintenance and configuration of key Firm security initiatives.

Responsibilities/Duties

• Engineer and design cloud security solutions within Microsoft Azure, make recommendations as needed
• Implement and / or improve logging and monitoring solutions in Azure and M365 to detect and respond to security threats in real time.
• Assess and select appropriate security controls and technologies for cloud environments.
• Assist with the management of  the Firm's deployed suite of security tools, including, but not limited to, SIEM, IDS/IPS, APT's, End Point Protection  Deception technology, PAM, MFA, DNS Security, CSPM, SSPM etc.
• Ensure the Firms Cloud systems adhere to Azure security best practices and baselines to ensure a secure configuration of Azure resources.
• Leverage the Firm's already deployed suite of tools to verify security controls within our cloud platforms, making recommendations as needed
• Advise and assist in Identity and Access Management (IAM) of Cloud resources, working closely with the IAM team to secure authentication to the Firm's cloud resources.
• Advise and assist the Email and Applications team on secure policy creation within the M365 environment. (Sharepoint/onedrive, Teams, Exchange Online)
• Provide security guidance and support to Infrastructure Azure developers and engineers.
• Participate in the computer security incident response team efforts and other security investigation activities as assigned
• Work with other IT teams and participate in project design meetings from a security perspective.
• Drive continuous improvement through trend analysis reporting and metrics management
• Provide technical assistance to IT staff in the detection and resolution of security problems
• Coordinate multiple projects concurrently and influence the decision making process
• Work with information security leadership to develop strategies and plans to enforce security requirements and address identified risks
• Communicate and report issues, status, and results to senior management
• Perform other duties as assigned

Required Skills

• 8+ years of experience in information security related responsibilities
• In-depth knowledge of Azure cloud services and architecture.

Required Experience

• Experience with Microsoft Defender for Cloud, Microsoft Defender for 365 and Microsoft Sentinel.
• Knowledge of Microsoft Entra ID , conditional access policies, and Azure Policy.
• Experience with Azure CLI and powershell.
• Experience in Azure Devops and scanning in CI/CD pipelines.
• Experience with logging in Azure using Azure Monitor, Event Hubs, and log analytic workspaces.
• Experience with Azure IAM technologies including Entra Identity Protection and JIT.
• Experience with Defender for M365 (Anti-phishing protection, anti-spoofing, anti-spam protection, Safe-Attachments, Safe Links, anti-malware solution)
• Knowledge with Terraform and securing terraform code.
• Knowledgeable in DLP, SIEM, AV, APT, Deception Technology, CSPM, SSPM
• Ability to effectively prioritize and execute tasks
• Ability to effectively present information verbally and in writing
• Must be able to work collaboratively in a team environment and independently
• Ability to handle sensitive and/or confidential material and information with suitable discretion
• Excellent interpersonal skills and a professional demeanor; ability to work effectively with all levels of Firm personnel and vendors

Required Education

• Bachelor's degree required
• Professional certifications, such as CISSP, CCSP, CCSK, or AZ-500.

Details

Salary Information

NY only: The estimated base salary range for this position is $175k to $200k at the time of posting.

The actual salary offered will depend on a variety of factors, including without limitation, the qualifications of the individual applicant for the position, years of relevant experience, level of education attained, certifications or other professional licenses held, and if applicable, the location in which the applicant lives and/or from which they will be performing the job. This role is exempt meaning it is not overtime pay eligible.

Privacy Notice

For information about how Simpson Thacher & Bartlett LLP collects and processes your personal information, please refer to our Privacy Notice available at https://www.stblaw.com/other/privacy-notice.