Cloud Security Engineer (Azure)

Quick Facts

• Salary: 600 - 1000 PLN net. / day
• Remote: Fully remote

Description

You will work in an agile environment in a project focused on improving security monitoring coverage by identifying and addressing monitoring blind spots across different business units and technologies.

The role focuses on onboarding new data sources and assets into Azure Data Explorer (ADX), ensuring security logs are collected, parsed, normalized, and validated for effective monitoring and threat detection.

You will develop and optimize Azure Logic Apps that use ADX data to automate security monitoring processes and support SOC operations, including creating KQL queries, building automation via Python, APIs and integrations, and producing technical documentation and operational procedures.

The team also validates data quality, supports monitoring dashboards, troubleshoots issues, and ensures smooth handover and maintenance of implemented solutions.

Responsibilities

• Onboard new data sources and assets into Azure Data Explorer (ADX)
• Collect, parse, normalize, and validate security logs for monitoring and threat detection
• Develop Azure Logic Apps to automate security monitoring using ADX data
• Create and optimize KQL queries
• Build automation using Python, APIs, and integrations
• Produce technical documentation, onboarding guides, and operational procedures
• Validate data quality and support monitoring dashboards
• Troubleshoot issues and resolve incidents in production environments
• Ensure smooth handover and ongoing maintenance of implemented solutions

Requirements

• Strong experience with Azure Data Explorer (ADX) and onboarding security log sources
• Good knowledge of Kusto Query Language (KQL) for log validation, analysis, troubleshooting, and data quality verification
• Experience with Azure Logic Apps development, deployment, and maintenance
• Knowledge of SQL and data analysis concepts
• Experience with Cribl and log aggregation/data pipeline solutions
• Proficiency in Python scripting and automation development
• Hands-on experience with Microsoft Defender and Microsoft Entra ID within Azure environments
• Solid understanding of IT security principles, SOC operations, and security monitoring processes
• Good knowledge of networking fundamentals, including TCP/IP protocols and network traffic concepts
• Experience with REST APIs, API integrations, and authentication mechanisms
• Ability to work with JSON data structures and API-based data exchanges
• Experience developing automation and integrations using APIs and scripting
• Knowledge of log collection, parsing, normalization, and data quality validation processes
• Ability to create and maintain technical documentation, onboarding guides, and operational procedures
• Experience with incident support, troubleshooting, and issue resolution in production environments
• Strong analytical and problem-solving skills
• Ability to collaborate with cross-functional teams and business units
• Fluency in Polish and English
• Experience with C3 data is considered an advantage

Benefits

• Work in an agile environment
• Opportunity to contribute to SOC security monitoring coverage improvements
• Remote work (fully remote)
• Salary: 600 - 1000 PLN net. / day
• Collaborative, cross-functional team environment
• Emphasis on diversity and inclusion
• Support for professional development through a proprietary programme