Cloud & AI Security Operations Engineer

So, what’s the role all about?

The Cloud & AI Security Operations Engineer is a hands-on individual contributor responsible for securing NiCE's cloud, productivity, and AI ecosystem. Reporting to the Cloud Services & Infrastructure Manager, you will operate and improve security controls across Azure, Microsoft 365, Entra ID, Defender XDR, Microsoft Sentinel, and Microsoft Purview. You will also extend security coverage across NiCE's growing AI footprint—including Microsoft 365 Copilot, Copilot Studio, Azure OpenAI, Azure AI Foundry, and emerging agentic workflows—and contribute to security across a smaller AWS estate.

You will partner closely with InfoSec, Cloud Architecture, Privacy, and R&D IT to keep NiCE's cloud and AI adoption safe, governed, and scalable. This is primarily a cloud security operations role anchored in the Microsoft ecosystem, with a clear growth path into AI security as the discipline matures.

How will you make an impact?

• Strengthen cloud security operations across NiCE’s cloud estate, with primary focus on Azure infrastructure, including network, workload, storage, secrets, key management, and secure configuration controls.

• Use Defender for Cloud to monitor CSPM findings, prioritize remediation, reduce cloud attack surface, and apply consistent security principles across Azure and the smaller AWS environment.

• Operate and improve Entra ID security controls, including Conditional Access, PIM, OAuth app governance, service principal hygiene, and Microsoft Graph permission reviews.

• Build and tune detections, alerts, and playbooks in Microsoft Sentinel and Defender XDR for cloud misconfiguration, identity attacks, data exfiltration, and endpoint-to-cloud attack paths.

• Operate Microsoft Purview capabilities, including DLP, sensitivity labeling, and information protection, to keep sensitive data classified, protected, and auditable across Microsoft 365 and cloud workloads.

• Support investigation and containment of cloud, identity, and data incidents, and contribute to post-incident hardening.

• Extend security controls to Microsoft 365 Copilot, Copilot Studio, Azure OpenAI, Azure AI Foundry, internal LLM environments, and agentic workflows as AI adoption matures.

• Help define practical guardrails for AI usage, including DLP coverage, access controls, monitoring, vendor/plugin review, and detection of misuse or sensitive-data leakage.

• Contribute to secure-by-default reference architectures, approved patterns, and enablement sessions that support safe cloud and AI adoption across IT, business, and R&D.

Have you got what it takes?

• Bachelor's degree in Computer Science, Information Security, or a related technical field—or equivalent practical experience.

• 2–4 years of hands-on cybersecurity or cloud security experience, ideally in a SOC, cloud security, or security engineering role.

• Strong hands-on experience securing Azure infrastructure and workloads across network, compute, storage, secrets, key management, secure configuration, and workload protection controls.

• Familiarity with Defender for Cloud or similar CSPM/CWPP tooling, with the ability to assess findings, prioritize remediation, and reduce cloud exposure across Azure and a smaller AWS environment.

• Working knowledge of Entra ID security controls, including Conditional Access, PIM, OAuth app governance, service principals, and Microsoft Graph permissions.

• Practical detection-engineering experience using Microsoft Sentinel, Defender XDR, KQL, analytics rules, and playbooks to detect cloud, identity, and endpoint-to-cloud threats.

• Working knowledge of Microsoft Purview capabilities, including DLP, sensitivity labeling, information protection, and data-risk monitoring across Microsoft 365 and cloud workloads.

• Practical scripting and automation skills using Python, PowerShell, KQL, Logic Apps, Azure Functions, or similar technologies.

• Strong collaboration and written communication skills, with the ability to work effectively with engineers and explain risk to non-security stakeholders.
• Genuine interest in AI and GenAI security demonstrated through production work, hands-on projects, structured research, or self-directed learning. Deep AI security tenure is not expected.
• Hands-on exposure to Microsoft 365 Copilot, Copilot Studio, Azure OpenAI, Azure AI Foundry, internal LLM environments, agentic workflows, prompt injection, jailbreak testing, OWASP Top 10 for LLMs, MITRE ATLAS, or NIST AI RMF is an advantage.

What’s in it for you?

Join an ever-growing, market-disrupting, global company where the teams – comprised of the best of the best – work in a fast-paced, collaborative, and creative environment! As the market leader, every day at NiCE is a chance to learn and grow, and there are endless internal career opportunities across multiple roles, disciplines, domains, and locations. If you are passionate, innovative, and excited to constantly raise the bar, you may just be our next NiCEr!

Enjoy NiCE-FLEX!

At NiCE, we work according to the NiCE-FLEX hybrid model, which enables maximum flexibility: 2 days working from the office and 3 days of remote work, each week. Naturally, office days focus on face-to-face meetings, where teamwork and collaborative thinking generate innovation, new ideas, and a vibrant, interactive atmosphere.

Requisition ID: 11493
Reporting into: Manager, Cloud Services & Infrastructure
Role Type: IC

#LI-Hybrid