Cloud Security Engineer

A Cloud Security Engineer at Hexagon US Federal is responsible for designing, implementing, and managing security controls for Azure-based infrastructures and applications. This includes monitoring and responding to security incidents using tools like Azure Sentinel, conducting threat modeling, performing vulnerability assessments, and ensuring compliance with important security frameworks such as FedRAMP and NIST 800-53.

To qualify for the Cloud Security Engineer position at Hexagon US Federal, candidates must hold a Bachelor’s degree with 5 years of relevant experience or 7 years of applicable work experience. Additionally, an Azure Security Engineer Associate certification (AZ-500) or CompTIA CySA+ certification is required, along with CompTIA Security+ certification to be obtained within the first 6 months of employment.

As a Cloud Security Engineer at Hexagon US Federal, familiarity with Azure tools such as Microsoft Defender for Cloud, Microsoft Sentinel, and Azure Security Center is essential. Experience with Azure Log Analytics, Azure Monitor, and tools for configuring security settings like RBAC, MFA, and privileged identity management is also beneficial.

Yes, Hexagon US Federal offers the Cloud Security Engineer position as a fully remote opportunity. This allows you to work from anywhere, providing the flexibility to balance your professional and personal life while contributing to important projects.

At Hexagon US Federal, career development for a Cloud Security Engineer is robust, with access to a Learning Management System offering diverse learning options. There are also tuition reimbursement programs and leadership development initiatives designed to help you grow professionally and advance your career.

When answering about your experience with Azure Security tools, provide specific examples of projects or tasks where you've utilized tools like Azure Sentinel or Microsoft Defender for Cloud. Highlight your approach to configuring security settings, monitoring incidents, and any successful outcomes you've achieved.

In your response, outline a structured approach to detecting and responding to security breaches. Discuss the importance of staying calm, documenting the incident, identifying affected systems, and communicating with stakeholders. Highlight your experience with incident response plans and tools used to mitigate threats.

Explain your methodology for conducting vulnerability assessments by detailing the steps you take, such as identifying assets, scanning for vulnerabilities, assessing risk, and patching. Mention any specific tools you use and how you prioritize vulnerabilities based on severity and potential impact.

When asked about RBAC, provide a clear explanation of how it restricts access based on roles assigned to users, applications, or groups. Discuss your experience in implementing RBAC in Azure, detailing the process of assigning roles, managing permissions, and ensuring compliance with security policies.

In your response, touch upon key compliance standards like FedRAMP, NIST SP 800-53, and the DoD Cloud SRG. Explain how you ensure that Azure deployments comply with these standards, and share any experience you have with audits or compliance assessments.

Describe your approach to staying current with cloud security trends, mentioning resources such as industry blogs, webinars, professional organizations, and continuous education. Highlight any certifications pursued and how you apply new knowledge to your role.

Discuss the proactive strategies you use to monitor security incidents. Cover how you utilize tools like Azure Sentinel and Log Analytics to create alerts and dashboards that help in real-time monitoring, and describe the follow-up actions you take after detecting incidents.

When asked for a successful security initiative, describe a specific project where you implemented a security feature or addressed a potential threat. Include details about the goal, the actions taken, the challenges faced, and the outcomes achieved, emphasizing quantifiable results if possible.

In response, highlight your experience working with remote teams, emphasizing communication tools and strategies you utilize to maintain collaboration. Share how you adapt your work style to ensure productivity and support among team members, regardless of their locations.

Share your step-by-step process for configuring Azure security settings. Discuss how you assess security needs, define configurations, implement controls, and test for compliance. Mention any resources or documentation you use to ensure best practices are followed.