CSPM Implementation Specialist/Azure Security

CSPM Implementation Specialist/Azure Security - Banking Client - London/Paris/Amsterdam/Brussels

Contract Duration: 12 Months
Locations: London (UK), Brussels (Belgium), Paris (France) or Amsterdam (Netherlands)
Working Arrangement: Hybrid - 8 days onsite per month in your selected location, with the remaining days remote
Contract Type: Contract/Freelance
UK Candidates: Umbrella company engagement required

Rate: £600 - £800 per day

About the Opportunity

We are recruiting for an experienced Cloud Security Posture Management (CSPM) Implementation Specialist to join a leading global financial market infrastructure organisation on an exciting 12-month contract.

As part of a strategic cloud transformation programme, our client is looking for a highly skilled, hands-on Azure security specialist to take ownership of the implementation, configuration and operationalisation of Microsoft Defender for Cloud CSPM across its enterprise Azure environment.

Working within the Chief Information Security Office (CISO), you will play a critical role in establishing a robust, scalable and sustainable CSPM capability, ensuring cloud infrastructure, applications and services are protected against emerging security threats and vulnerabilities.

This is a hands-on technical implementation role, requiring someone who has previously deployed and configured CSPM solutions rather than solely providing architectural oversight or security governance.

Key Responsibilities

CSPM Implementation & Configuration

• Lead the implementation, deployment and configuration of Microsoft Defender for Cloud CSPM across enterprise Azure environments.
• Establish and operationalise CSPM capabilities aligned with organisational security requirements and industry best practices.
• Configure security posture monitoring, policy enforcement, compliance assessments and vulnerability management capabilities.
• Ensure appropriate CSPM coverage across Azure subscriptions, workloads and cloud infrastructure.
• Integrate CSPM with existing security tools, processes and enterprise infrastructure.
• Identify security configuration gaps and implement improvements to strengthen the organisation's overall cloud security posture.

Azure Cloud Security Architecture

• Implement and maintain cloud security controls across complex Microsoft Azure environments.
• Work extensively with Azure Landing Zones, Azure Policy and hub-and-spoke network architectures.
• Ensure security controls align with enterprise architecture standards and cloud governance requirements.
• Identify cloud misconfigurations, security vulnerabilities and potential compliance risks.
• Collaborate with cloud engineering, infrastructure and security architecture teams to ensure effective integration of CSPM capabilities.

Container Security & Vulnerability Management

• Integrate container vulnerability scanning into the CSPM environment and existing patching processes.
• Support security monitoring and vulnerability management across containerised workloads.
• Work with technologies such as Azure Kubernetes Service (AKS), container registries and Microsoft Defender for Containers where applicable.
• Establish risk-based processes for identifying, prioritising and remediating vulnerabilities.
• Coordinate with infrastructure and application teams to ensure security findings are appropriately addressed.

CSPM Operationalisation & Governance

• Establish operational processes and governance frameworks to support the ongoing management of CSPM capabilities.
• Define monitoring procedures, vulnerability remediation workflows, exception management and reporting processes.
• Develop risk-based approaches to prioritising security findings and remediation activities.
• Ensure appropriate ownership, accountability and escalation procedures are established.
• Support the continuous improvement of cloud security controls and operational practices.

Security Automation & Continuous Improvement

• Identify opportunities to automate CSPM configuration, monitoring and remediation processes.
• Recommend improvements to security policies, operational workflows and cloud security standards.
• Support the standardisation of security controls across Azure environments.
• Collaborate with technical teams to improve the efficiency and effectiveness of cloud security operations.

Essential Technical Skills & Experience

The successful candidate must demonstrate:

• Proven hands-on experience implementing and configuring Microsoft Defender for Cloud CSPM within enterprise Azure environments.
• Strong experience with Cloud Security Posture Management (CSPM) implementation, deployment and operationalisation.
• Excellent technical knowledge of Microsoft Azure cloud security services and security architecture.
• Practical experience implementing and managing Azure Policy, Azure Landing Zones and hub-and-spoke architectures.
• Experience integrating container vulnerability scanning with cloud security monitoring and remediation processes.
• Strong understanding of cloud security misconfigurations, vulnerability management and risk-based remediation.
• Experience developing CSPM operational procedures, governance processes and security monitoring frameworks.
• Ability to identify and implement security automation and standardisation opportunities.
• Strong technical documentation skills and experience delivering knowledge transfer to internal teams.
• Good understanding of information security principles, risk management and enterprise security controls.

*Rates depend on experience and client requirements