Senior / Lead Microsoft Security Engineer CASB & Cloud Apps

Role : Microsoft Defender for Cloud Apps / CASB Engineer

Experience: Senior/Principal Level

Role Overview:

We are looking for a specialist CASB / Microsoft Defender for Cloud Apps Engineer to manage cloud application discovery, governance, data protection and security controls across SaaS and cloud environments.

Key Responsibilities:

• Implement Cloud Discovery and Shadow IT visibility using approved traffic and endpoint sources.
• Assess sanctioned and unsanctioned applications based on risk, data, identity and business-use requirements.
• Configure app connectors, CASB policies, governance actions and alerts.
• Monitor data movement across SaaS, PaaS and cloud services.
• Integrate Defender for Cloud Apps with Entra ID, Defender XDR and Purview DLP.
• Integrate security workflows with SIEM/SOAR, Google SecOps and ServiceNow.
• Tune alerts and controls using simulation and staged rollout.
• Manage exceptions, break-glass scenarios, rollback and user-impact considerations.
• Maintain cloud application inventory, connector permissions, audit records and operational runbooks.
• Produce reporting around Shadow IT, sanctioned applications, data movement, control health and risk trends.

Mandatory Skills:

• Strong hands-on Microsoft Defender for Cloud Apps / enterprise CASB experience.
• Cloud Discovery, application assessment, connectors and CASB policies.
• Understanding of SaaS data movement, OAuth, identity, endpoints and cloud access patterns.
• Experience integrating Entra ID, Defender XDR, Purview DLP and SIEM/SOAR.
• Strong policy testing, tuning, exception, release and rollback experience.

Desirable Skills:

• Palo Alto Prisma Access, Secure Web Gateway, SSE/SASE or Cloudflare.
• PowerShell, Python or API automation.
• Microsoft security or cloud-access certifications.