Azure Subject Matter Expert/SOC Security Architect

Azure SME SOC Security Architect

Role Overview :

The Azure SME will lead the design, deployment, and optimization of secure cloud architectures using Microsoft Azure. This role demands deep expertise in SIEM/SOAR, endpoint protection, cloud security posture management (CSPM), and threat intelligence to ensure robust defense across hybrid and cloud native environments.

Key Responsibilities :

- Architect and implement Azure solutions integrating :

1. Microsoft Sentinel for SIEM/SOAR

2. Defender for Servers (AV, EDR, FIM)

3. Defender for Cloud (CSPM, workload protection)

4. Defender Threat Intelligence (threat hunting, enrichment)

- Design secure Landing Zones and enforce security baselines

- Develop incident response playbooks and automation in Sentinel

- Integrate Defender tools with Log Analytics and Azure Monitor

- Conduct threat modeling, vulnerability assessments, and compliance audits

- Collaborate with SOC, DevOps, and Infra teams to embed security into CI/CD pipelines

- Provide technical leadership and mentorship for cloud security

- Maintain documentation, runbooks, and training content

Required Skills & Qualifications :

- Bachelor's in Computer Science, Cybersecurity, or related field

- 8+ years in Azure architecture and security implementation

- Deep, hands-on experience with :

1. Microsoft Sentinel (KQL, rules, automation)

2. Defender for Servers (EDR, AV, FIM setup)

3. Defender for Cloud (CSPM, compliance)

4. Defender Threat Intelligence (IOC enrichment, profiling)

- Scripting proficiency : PowerShell, KQL, Bicep, Terraform

- Strong understanding of :

1. Zero Trust Architecture

2. Role-Based Access Control (RBAC)

3. Conditional Access

4. Azure AD

- Microsoft Certifications : SC-200, AZ-500, SC-100 (any)

Preferred Skills :

- Experience with multi-cloud security (AWS, GCP) via Azure Arc

- Familiarity with MITRE ATT&CK and threat detection

- Working knowledge of: NIST, ISO 27001, GDPR compliance

- Exposure to Microsoft Security Copilot and AI-driven threat analysis