Cloud Security Engineer

Brown Advisory

Cloud Security Engineer strengthening Azure, SaaS, and application security for independent investment management firm. Integrating telemetry, maturing controls, and coordinating remediation across technology and vendor teams.

Posted 8/11/2026full-timeBaltimore • District of Columbia, Maryland • 🇺🇸 United StatesMid-LevelSenior💰 $140,000 - $165,000 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in Azure Security Engineering, including secure configuration, logging, monitoring, and remediation. Proficient in implementing security baselines, managing SaaS security, and integrating security telemetry into SIEM workflows.

Highest-signal resume keywords

Azure Security EngineeringMicrosoft Defender for CloudSaaS Security AdministrationStatic and Dynamic Application-Security TestingSIEM Integration

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Azure Security ArchitectureSecure Configuration PracticesVulnerability TriageCloud Control HardeningLoggingMonitoringSecure SDLC PracticesOperational ReadinessCloud Security StandardsException Documentation

Soft Skills

Strong Written CommunicationIndependent WorkCoordination Across Teams

Tools & Technologies

Microsoft 365SalesforceBoxAzure PolicyEntra IDPurview

Certifications & Qualifications

Microsoft Azure Security CertificationsCISSPCCSP

Industry Keywords

Information SecurityCloud SecurityInfrastructure SecurityApplication SecurityFinancial Services

Tech Stack

Tools & technologies

AzureCloudCyber SecuritySDLC

About the role

Key responsibilities & impact

Own day-to-day security engineering for Azure environments, including secure configuration, cloud control hardening, logging, monitoring, and remediation follow-through
Partner with Infrastructure and Engineering teams to implement Azure security baselines, secure networking patterns, key management practices, storage protections, and workload guardrails
Support Microsoft Defender for Cloud, Azure Policy, Entra-adjacent cloud controls, conditional access inputs, and other Microsoft security capabilities
Review hosted applications and third-party-developed cloud solutions for secure architecture, authentication, authorization, logging, data protection, and operational readiness
Configure and improve security controls for SaaS platforms such as Salesforce, Box, Microsoft 365, and other business-critical cloud applications
Support DevSecOps activities, including static and dynamic application-security testing coordination, vulnerability triage, and remediation guidance
Integrate cloud, SaaS, and application telemetry into SIEM and detection workflows
Partner with Security Operations on actionable alerting and response procedures
Maintain sanctioned application lists, cloud security standards, exception records, and implementation documentation
Execute immediate remediation actions and coordinate complex fixes across platform, application, and vendor teams
Develop reporting on cloud security posture, open risks, remediation progress, and control maturity for security and technology leadership

Requirements

What you’ll need

Bachelor's degree in cyber security, computer science, engineering, information systems, or a relevant field, or equivalent professional experience
4–8 years of experience in information security, cloud security, infrastructure security, application security, or a related technical discipline
Hands-on experience securing Microsoft Azure environments
Ability to work independently in a lean team while coordinating across technology, vendor, risk, and business stakeholders
Azure security architecture, Defender for Cloud, Azure Policy, logging, monitoring, and secure configuration practices
Microsoft 365 security and compliance concepts, including Entra ID, Purview, Defender, and conditional access
SaaS security administration for Salesforce, Box, and other enterprise cloud applications
Static and dynamic application-security testing concepts, vulnerability triage, and secure SDLC practices
SIEM integration patterns, alert tuning, security telemetry, and operational handoff to incident response teams
Strong written communication skills for standards, procedures, exception documentation, and leadership reporting
Applicants must be authorized to work in the United States without current or future employer-sponsored work authorization
Microsoft Azure security certifications, CISSP, CCSP, or other relevant professional designations preferred
Financial services or other regulated-industry experience preferred

Benefits

Comp & perks

Medical
Dental
Vision
Wellness program participation incentive
Financial wellness program
Fitness event fee reimbursement
Gym membership discounts
Colleague Assistance Program
Telemedicine Program (for those enrolled in Medical)
Adoption Benefits
Daycare late pick-up fee reimbursement
Basic Life & Accidental Death & Dismemberment Insurance
Voluntary Life & Accidental Death & Dismemberment Insurance
Short Term Disability
Paid parental leave
Group Long Term Disability
Pet Insurance
401(k) (50% employer match up to IRS limit, 4 year vesting)
Bonus or long-term incentive eligibility, if applicable