Lead Azure AI Security Engineer

About the role

We are looking for a Lead Azure AI Security Engineer to provide technical leadership in securing Azure and Microsoft cloud environments at enterprise scale. You will design, implement, and continuously improve security architecture while leveraging AI‑powered tools and agentic workflows to automate daily security engineering tasks.

Key responsibilities

• Lead the design and implementation of security architecture across Azure, Microsoft 365, Microsoft Entra ID, hybrid and multi‑cloud environments.
• Cover core security domains such as CSPM/CNAPP, IAM, PAM, DLP, Microsoft Defender, SIEM/SOAR, Zero Trust, DevSecOps, IaC security, container and Kubernetes security, API and micro‑service protection, and secure landing zones.
• Develop and maintain automation scripts, workflows, and security tooling using PowerShell, Python, Azure CLI, Logic Apps, Azure Functions, KQL and REST APIs.
• Employ AI‑driven tools and agentic workflows to automate security findings triage, log analysis, incident investigation, compliance evidence collection, and runbook generation.
• Design or integrate AI agents and AI‑assisted automations while ensuring privacy, governance and security controls.
• Collaborate with engineering, DevOps, database, operations and compliance teams to embed security throughout the delivery lifecycle.
• Train and mentor team members on cloud security best practices and AI‑assisted automation.

Required profile

• Bachelor’s degree in Computer Science, Information Security, Engineering or equivalent practical experience.
• Extensive hands‑on experience with Microsoft Azure services and enterprise‑scale cloud environments.
• Proven expertise with Microsoft security technologies such as Microsoft Entra ID / Azure AD and the Microsoft Defender stack.
• Demonstrated ability to lead security initiatives and work across cross‑functional teams.

Required skills

• Microsoft Azure (IaaS, PaaS, SaaS)
• Microsoft Entra ID / Azure Active Directory
• Microsoft Defender, SIEM, SOAR
• CNAPP / CSPM solutions
• Identity and Access Management (IAM) and Privileged Access Management (PAM)
• Data Protection, Data Loss Prevention (DLP)
• Zero Trust architecture, conditional access, least‑privilege principles
• Container and Kubernetes security
• API and micro‑service security
• Infrastructure as Code (IaC) security, policy‑as‑code
• PowerShell, Python, Azure CLI
• Logic Apps, Azure Functions
• Kusto Query Language (KQL)
• REST APIs
• AI platforms/frameworks for agentic automation