Senior Azure Security Consultant I AI Security Engineer

Senior Azure Security Consultant I AI Security Engineer

• Cyber Security
• Microsoft Azure

FOKUS
• Beratung, Architektur und Umsetzung sicherer Azure- und Hybrid-Cloud-Umgebungen sowie technische Absicherung von AI-Workloads – vom Design bis zur Betriebsübergabe.

BRANCHENERFAHRUNG
• Finanzsektor und internationale Banken
• Öffentlicher Dienst und hochregulierte Enterprise-Umgebungen
• Komplexe IT-Landschaften mit 10.000 bis 30.000 Benutzern.

AZURE SECURITY & LANDING ZONES
• Sichere Azure-Landing-Zones: Management Groups, Subscriptions, Azure Policy, RBAC, Resource Locks sowie zentrale Logging- und Monitoring-Strukturen.
• Schutz von Compute, Storage, Datenbanken, App Services, Containern, APIs und Key Vault; Verschlüsselung, Managed HSM, Secrets und sichere administrative Zugriffe.

IDENTITY & ZERO TRUST
• Microsoft Entra ID: Conditional Access, MFA/Passwordless, PIM, Identity Protection, Access Reviews, RBAC, Managed/Workload Identities, App Registrations und Hybrid Identity, Zero Trust und Least Privilege.

MICROSOFT DEFENDER & SENTINEL
• Defender for Cloud: CNAPP, CSPM, CWPP; Secure Score, Attack Path Analysis, Cloud Security Explorer sowie Schutz für Server, Storage, Databases, App Services, Container, APIs, Key Vault und AI Services.
• Microsoft Defender XDR, Defender for Endpoint, Defender for Identity, Defender for Office 365 und Defender for Cloud Apps.
• Incident Analysis, Advanced Hunting, Vulnerability Management, ASR Rules, Endpoint Hardening und automatisierte Reaktionen.
• Microsoft Sentinel: SIEM/SOAR, Data Connectors, Analytics Rules, Incidents, Workbooks, Watchlists, Automation Rules und Logic-Apps-Playbooks; KQL, Threat Hunting und Detection Engineering.

AI & LLM SECURITY
• AI Security Engineering und Architektur für LLMs, Microsoft Foundry, Azure OpenAI, Copilot, RAG-Anwendungen und autonome AI Agents.
• AI Security Posture Management und KI Threat Protection; Schutz vor Prompt Injection, Indirect Prompt Injection, Data Leakage, Data/RAG Poisoning, Jailbreaks, Credential Theft und Agent/Tool Abuse.
• Sichere Identitäten, Key Vault, Content Safety, Prompt Shields, Guardrails, Monitoring und Logging sowie Integration mit Entra ID, Defender XDR und Sentinel.

AUSBILDUNG
• Dipl.-Ing. Informatik (fünfjähriges Hochschulstudium)

Azure Security
• Microsoft Certified: Cybersecurity Architect Expert (SC-100)
• Microsoft Certified: Azure Security Engineer Associate (AZ-500)
• Microsoft Certified: Information Security Administrator Associate (SC-401)
• Microsoft Certified: Identity and Access Administrator Associate (SC-300)
• Microsoft Certified: Security Operations Analyst Associate (SC-200)
• Security, Compliance, and Identity Fundamentals (SC-900)

AI Security
• Microsoft Certified: Cloud and AI Security Engineer Associate (SC-500)

Azure Architecture
• Microsoft Certified: Azure Solutions Architect Expert (AZ-305)
• Microsoft Certified: Azure Administrator Associate (AZ-104)

Microsoft Legacy
• MCP, MCSA, MCSE, MCTS, MCITP

IT Service Management
• ITIL v3 Foundation