Job Specifications
Role Overview
We are seeking a Windows Azure Vulnerability Engineer to identify, assess, and remediate security vulnerabilities across Azure cloud infrastructure and Windows-based environments. This role focuses on vulnerability management, cloud security hardening, compliance, and automation, working closely with cloud, infrastructure, and security teams.
Key Responsibilities
Perform vulnerability assessments across Azure resources and Windows servers
Identify, analyze, and prioritize vulnerabilities based on risk and impact
Drive remediation efforts in collaboration with cloud, DevOps, and platform teams
Configure and manage vulnerability scanning tools (agent-based and agentless)
Conduct secure configuration reviews for Azure and Windows workloads
Implement and validate patch management for Windows systems in Azure
Monitor and report vulnerabilities, remediation SLAs, and risk trends
Support security audits, compliance, and regulatory requirements
Develop automation scripts to streamline vulnerability detection and remediation
Participate in incident response and root cause analysis when required
Required Skills & Qualifications
3–8+ years of experience in cybersecurity or vulnerability management
Strong hands-on experience with Microsoft Azure
Azure VMs, VNets, NSGs, Azure Firewall, Azure Monitor
Strong expertise in Windows OS security (Server 2016/2019/2022)
Experience with vulnerability scanning tools such as:
Qualys, Tenable, Rapid7, Defender for Cloud
Solid understanding of:
CVEs, CVSS scoring, remediation strategies
Secure baseline configurations (CIS, Microsoft Security Baselines)
Experience with patching and configuration management
Familiarity with PowerShell scripting
Knowledge of identity and access management (Azure AD / Entra ID)
Strong documentation and communication skills
Good to Have / Preferred Skills
Experience with Azure Defender / Microsoft Defender for Cloud
Infrastructure as Code exposure (ARM, Bicep, Terraform)
Knowledge of Zero Trust and cloud security best practices
Experience working in regulated environments (SOX, PCI, HIPAA, ISO 27001)
Exposure to CI/CD security integration
Azure certifications:
AZ-500 (Azure Security Engineer)
SC-200 / SC-300
About the Company
Serving top Fortune 500 companies for 17 years with Software Solutions, Implementations, and Consulting Services. TEKVANA™ provides comprehensive services for Cloud ERP Solutions, Workday, PeopleSoft, and SAP.
Know more