Cloud Security Engineer

OneStream Software

Cloud Security Engineer securing OneStream’s Azure and Microsoft 365 environments. Protecting enterprise finance data through threat detection, vulnerability management, and cloud governance.

Posted 8/12/2026full-timeRemote • Illinois, Minnesota, Wisconsin • 🇳🇱 Netherlands, 🇺🇸 United StatesMid-LevelSenior💰 $86,000 - $112,000 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in securing cloud environments, particularly Microsoft Azure, through effective configuration, threat detection, and incident response. Proficient in utilizing security technologies such as Microsoft Defender and Kusto Query Language to enhance cloud security and compliance.

Highest-signal resume keywords

Microsoft Azure SecurityMicrosoft Defender AdministrationKusto Query LanguageVulnerability ManagementIncident Response

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Cloud SecuritySecurity AssessmentsConfiguration ManagementThreat DetectionData ProtectionPowerShellBashREST APIsWindows Operating SystemLinux Operating System

Soft Skills

Analytical SkillsProblem-Solving SkillsCommunication SkillsOrganizational SkillsAttention to Detail

Tools & Technologies

Microsoft Defender for CloudMicrosoft SentinelAzure Log AnalyticsAzure Kubernetes ServiceCloud Access Security Broker (CASB)

Certifications & Qualifications

AZ-500AZ-104SC-200SC-300Security+

Industry Keywords

NIST 800-53FedRAMPSOC 1SOC 2ISO 27001Identity and Access Management (IAM)Infrastructure as Code (IaC)AgileScrumDevSecOps

Tech Stack

Tools & technologies

AnsibleAWSAzureCloudCyber SecurityDNSFirewallsKubernetesLinuxMS SQL Server.NETOracleSQLTCP/IPTerraform

About the role

Key responsibilities & impact

Design, implement, and continuously improve security controls and configuration baselines across Microsoft Azure and Microsoft 365.
Configure, administer, and optimize Microsoft Defender for Cloud, Microsoft Defender for Endpoint, Microsoft Defender for Cloud Apps, and related technologies.
Conduct security assessments of cloud resources, applications, Azure Kubernetes Service, and containerized workloads.
Identify vulnerabilities, misconfigurations, excessive permissions, and other security risks.
Prioritize vulnerability findings, coordinate remediation efforts, and validate corrective actions.
Configure and enhance cloud security monitoring, threat detection, investigation, response, and automation using Microsoft Sentinel, Kusto Query Language, and related technologies.
Collaborate with Cloud, Compliance, and other internal teams to ensure secure cloud service design, deployment, and maintenance.
Respond to customer security inquiries, assessments, and questionnaires.
Develop and maintain technical documentation, procedures, dashboards, alerts, and reporting.
Support internal and external audits by gathering evidence, validating controls, and demonstrating compliance.
Support incident response by investigating suspicious, anomalous, or unauthorized cloud activity and participating in security investigations.

Requirements

What you’ll need

BS/BA in Cybersecurity, Computer Science, Engineering, or a technology-related field, or equivalent work experience
3+ years of experience securing cloud-based infrastructure, services, and technologies
Experience identifying, analyzing, and mitigating security risks within cloud environments
Experience securing Microsoft Azure through secure configuration, least-privilege access, data protection, threat detection and response, and security hardening
Experience deploying, administering, and using Microsoft Defender, SIEM, CASB, vulnerability management, and related security technologies
Working knowledge of Azure Log Analytics, Kusto Query Language, PowerShell, Bash, and REST APIs
Working knowledge of Microsoft Entra ID, RBAC, authentication, authorization, and least-privilege access
Working knowledge of Windows and Linux operating systems
Familiarity with incident response, incident management, and change management processes
Preferred: experience with a CSP, MSP, SaaS provider, or similarly regulated cloud environment
Preferred: 5+ years of experience with Microsoft Azure, AKS, and containerized workloads
Preferred: knowledge of NIST 800-53, FedRAMP, SOC 1, SOC 2, ISO 27001, or similar standards
Preferred: knowledge of IAM technologies and protocols including Okta, SAML, OAuth, and OIDC
Preferred: experience with IaC technologies including ARM, Bicep, Terraform, and Azure DevOps pipelines
Preferred: working knowledge of network security, TCP/IP, DNS, TLS, and firewalls
Preferred: familiarity with Agile, Scrum, and DevSecOps
Preferred: relevant cybersecurity certifications such as AZ-500, AZ-104, SC-200, SC-300, SC-100, Security+, or Cloud+
Strong analytical and problem-solving skills
Excellent written, verbal, and presentation communication skills
Ability to communicate technical information to technical and non-technical stakeholders
Demonstrated initiative, accountability, and attention to detail
Effective prioritization and organizational skills
Adaptability to changing technologies, priorities, and business needs
Commitment to continuous learning and professional development
Legally authorized to work for any company in the United States without sponsorship

Benefits

Comp & perks

Vision
Medical
Life
Dental
401K
Additional variable compensation may apply
Excellent Medical Plan
Dental & Vision Insurance
Life Insurance
Short & Long Term Disability
Vacation Time
Paid Holidays
Professional Development
Retirement Plan
Multiple training opportunities
Variety of project work
Strong culture and camaraderie
Transparency around corporate structure, salary, and benefits