Lead Azure AI Security Engineer

About the role

We are looking for a Lead Azure AI Security Engineer to provide technical leadership and subject‑matter expertise in securing Azure and Microsoft cloud environments at enterprise scale. You will design, implement and continuously improve security architecture while leveraging AI‑powered tools to automate daily security engineering activities across hybrid and multi‑cloud environments.

Key responsibilities

• Provide technical leadership and expertise in securing Azure, Microsoft 365, Microsoft Entra ID, and multi‑cloud workloads.
• Design and improve security architecture across CSPM/CNAPP, IAM, PAM, DLP, Microsoft Defender stack, SIEM/SOAR, BC/DR, DevSecOps, container and Kubernetes security, and policy‑as‑code.
• Plan, design and implement security controls for cloud workloads, applications, infrastructure and data.
• Collaborate with engineering, DevOps, database, operations and compliance teams to embed security throughout the delivery lifecycle.
• Support Zero Trust implementation, secure authentication, conditional access, least‑privilege and identity protection.
• Develop and maintain automation scripts, workflows and tooling using PowerShell, Python, Azure CLI, Logic Apps, Azure Functions, KQL and REST APIs.
• Use AI‑powered tools and agentic workflows to automate findings triage, log analysis, incident investigation, configuration review, compliance evidence collection and vulnerability analysis.
• Design or integrate AI agents and AI‑assisted automations while ensuring security, privacy and governance controls.
• Define guardrails for secure AI adoption, including data protection, access control, prompt security, model usage, auditability and human‑in‑the‑loop processes.
• Train and support team members on cloud security practices and AI‑assisted automation.

Required profile

• Minimum 3 + years of experience in software development.
• Bachelor’s degree in Computer Science, Information Security, Engineering or equivalent practical experience.
• Hands‑on experience with Microsoft Azure services and enterprise‑scale cloud environments.
• Strong understanding of cloud security concepts, Azure architecture and Zero Trust principles.

Required skills

• Microsoft Azure
• Microsoft Entra ID / Azure Active Directory
• Microsoft Defender for Cloud & Defender XDR
• Microsoft Sentinel, Microsoft Purview, Microsoft Intune
• Conditional Access, Identity Protection
• PowerShell, Python, Azure CLI
• Logic Apps, Azure Functions
• KQL, REST APIs
• AI‑powered security tools and automation frameworks
• Container and Kubernetes security, policy‑as‑code
• SIEM/SOAR, DevSecOps, Zero Trust architecture