CSPM Implementation Specialist / Azure Security

About the Opportunity

We are recruiting for an experienced Cloud Security Posture Management (CSPM) Implementation Specialist to join a leading global financial market infrastructure organisation on an exciting 12-month contract.

As part of a strategic cloud transformation programme, our client is looking for a highly skilled, hands-on Azure security specialist to take ownership of the implementation, configuration and operationalisation of Microsoft Defender for Cloud CSPM across its enterprise Azure environment.

Key Responsibilities

• CSPM Implementation & Configuration
• Lead the implementation, deployment and configuration of Microsoft Defender for Cloud CSPM across enterprise Azure environments.
• Establish and operationalise CSPM capabilities aligned with organisational security requirements and industry best practices.
• Configure security posture monitoring, policy enforcement, compliance assessments and vulnerability management capabilities.
• Ensure appropriate CSPM coverage across Azure subscriptions, workloads and cloud infrastructure.
• Integrate CSPM with existing security tools, processes and enterprise infrastructure.
• Identify security configuration gaps and implement improvements to strengthen the organisation's overall cloud security posture.
• Azure Cloud Security Architecture
• Implement and maintain cloud security controls across complex Microsoft Azure environments.
• Work extensively with Azure Landing Zones, Azure Policy and hub-and-spoke network architectures.
• Ensure security controls align with enterprise architecture standards and cloud governance requirements.
• Identify cloud misconfigurations, security vulnerabilities and potential compliance risks.
• Collaborate with cloud engineering, infrastructure and security architecture teams to ensure effective integration of CSPM capabilities.
• Container Security & Vulnerability Management
• Integrate container vulnerability scanning into the CSPM environment and existing patching processes.
• Support security monitoring and vulnerability management across containerised workloads.
• Work with technologies such as Azure Kubernetes Service (AKS), container registries and Microsoft Defender for Containers where applicable.
• Establish risk-based processes for identifying, prioritising and remediating vulnerabilities.
• Coordinate with infrastructure and application teams to ensure security findings are appropriately addressed.
• CSPM Operationalisation & Governance
• Establish operational processes and governance frameworks to support the ongoing management of CSPM capabilities.
• Define monitoring procedures, vulnerability remediation workflows, exception management and reporting processes.
• Develop risk-based approaches to prioritising security findings and remediation activities.
• Ensure appropriate ownership, accountability and escalation procedures are established.
• Support the continuous improvement of cloud security controls and operational practices.
• Security Automation & Continuous Improvement
• Identify opportunities to automate CSPM configuration, monitoring and remediation processes.
• Recommend improvements to security policies, operational workflows and cloud security standards.
• Support the standardisation of security controls across Azure environments.
• Collaborate with technical teams to improve the efficiency and effectiveness of cloud security operations.

Essential Technical Skills & Experience

• The successful candidate must demonstrate:
• Proven hands-on experience implementing and configuring Microsoft Defender for Cloud CSPM within enterprise Azure environments.
• Strong experience with Cloud Security Posture Management (CSPM) implementation, deployment and operationalisation.
• Excellent technical knowledge of Microsoft Azure cloud security services and security architecture.
• Practical experience implementing and managing Azure Policy, Azure Landing Zones and hub-and-spoke architectures.
• Experience integrating container vulnerability scanning with cloud security monitoring and remediation processes.
• Strong understanding of cloud security misconfigurations, vulnerability management and risk-based remediation.
• Experience developing CSPM operational procedures, governance processes and security monitoring frameworks.
• Ability to identify and implement security automation and standardisation opportunities.
• Strong technical documentation skills and experience delivering knowledge transfer to internal teams.
• Good understanding of information security principles, risk management and enterprise security controls.