Cloud Security Engineer (Azure / AWS)

As part of CAPVALUE CYBER SECURITY's Cloud Security practice, you will work on technically demanding engagements focused on securing Azure and AWS environments, across a range of client contexts including hybrid on-premise/cloud infrastructures and multicloud architectures. Your core responsibilities include conducting cloud configuration audits (CSPM) on Azure and AWS: assessing the overall security posture, identifying deviations from CIS Benchmarks and Microsoft Security Baselines, and producing structured audit reports tailored to both technical teams and executive stakeholders. You will be responsible for evaluating IAM and RBAC architectures, hardening Azure AD / Entra ID, Microsoft 365, and hybrid Active Directory / cloud environments. A key focus will be placed on identifying privilege escalation paths, over-permissive delegations, and misconfigured service accounts — critical attack vectors in modern cloud environments. Working closely with Red Team and SOC teams, you will contribute to the design and execution of hybrid on-premise/cloud attack scenarios, used to assess the resilience of client architectures under realistic conditions. This cross-functional collaboration with other technical practices is central to CAPVALUE CYBER SECURITY's approach. You will also contribute to expanding our cyber range platform with Azure, AWS, and Microsoft 365 dedicated labs: designing training scenarios, deploying vulnerable environments, and creating technical content for learners and clients in training programs. Finally, you will support clients in aligning with recognized cloud security frameworks (CIS Benchmarks, Microsoft Security Baselines, AWS Well-Architected Framework – Security Pillar), helping them prioritize remediation actions and continuously improve their security posture.