Cloud Security Engineer
Morgan & Morgan, P.A.
Salary undisclosed
Need a reasonable accommodation to apply or interview? Contact us.
JobMinglr uses automated technology to recommend jobs based on profile information and job preferences. Match Score does not determine eligibility for a position, prevent a user from viewing or applying to a job, or make hiring decisions on behalf of an employer.
Description
At Morgan & Morgan, the work we do matters. For millions of Americans, we’re their last line of defense against insurance companies, large corporations or defective goods. From attorneys in all 50 states, to client support staff, creative marketing to operations teams, every member of our firm has a key role to play in the winning fight for consumer rights. Our over 6,000 employees are all united by one mission: For the People.
Cloud Security Engineer
Location: Orlando, FL or Tampa, FL (Onsite, Full-Time)
Work Arrangement: This is an in-office position, open to local candidates only.
About the Role
Our firm is a large, multi-state law practice with a sophisticated technology environment and a deep responsibility to protect highly sensitive client and matter data. We are seeking a Senior Security Engineer to strengthen and mature our Microsoft-centered security program. This is a hands-on engineering role for someone who thrives on threat detection, tenant hardening, identity modernization, and security automation—and who can clearly communicate risk and remediation to both technical teams and firm leadership.
Key Responsibilities
Detection and Response
- Engineer, tune, and operate detections and response workflows across Microsoft Defender XDR and Microsoft Sentinel, including authoring and optimizing KQL queries, analytics rules, workbooks, and hunting content.
Tenant and Endpoint Hardening
- Lead and execute M365 tenant hardening initiatives across the E5 stack, establishing and maintaining secure baselines and configuration standards.
- Administer and harden endpoint security through Microsoft Defender for Endpoint and Intune, including device compliance, configuration profiles, and attack surface reduction.
Security Automation and Vulnerability Management
- Build and maintain security automation (e.g., Logic Apps, automation rules/playbooks, PowerShell, Azure Functions) to reduce manual effort and accelerate response.
- Own vulnerability assessment and remediation tracking, partnering with IT and infrastructure teams to close gaps.
Cloud, Identity, and Data Governance
- Secure and govern Azure infrastructure, applying cloud security best practices across resources and workloads.
- Configure and manage Microsoft Purview for data governance, information protection, data loss prevention, insider risk, and compliance.
- Strengthen identity and access management (IAM) practices firm-wide, including least-privilege enforcement and access reviews.
AI Security and Documentation
- Secure and govern AI and AI agents across the firm, addressing data exposure, identity and access for agents, acceptable-use controls, and the confidentiality and privilege concerns unique to a legal environment.
- Document standards, procedures, and runbooks; communicate security posture, incidents, and recommendations clearly to technical staff and firm leadership.
- Manage application security assessments and lifecycle oversight to retire applications that are inactive or pose security risks.
Qualifications
- Strong hands-on expertise across: Defender XDR enterprise defense suite and Microsoft Sentinel with proficient KQL; M365 tenant hardening (Entra ID, Exchange, Teams, SharePoint); Azure infrastructure security; security automation (SOAR); Entra ID and Conditional Access; vulnerability assessment; Defender for Endpoint, Intune, Application Control; and Microsoft Purview (DSPM, IP, DLP, IRM, DLM, AI).
- Strong technical, organizational, time-management, and communication skills.
- Participate in scheduled after-hours changes as needed.
Education and Experience
- Experience at a law firm or in a similarly regulated, confidentiality-driven environment.
- Demonstrated experience securing AWS and/or GCP environments in enterprise settings.
- Experience designing and implementing security controls for AI and agent-based workloads.
- 4–7+ years of experience as a Security Engineer at a large, multi-state organization.
#LI-MB1
Benefits
Morgan & Morgan is a leading personal injury law firm dedicated to protecting the people, not the powerful. This success starts with our staff. For full-time employees, we offer an excellent benefits package including medical and dental insurance, 401(k) plan, paid time off and paid holidays.
Equal Opportunity Statement
Morgan & Morgan provides equal employment opportunities to all employees and applicants for employment and prohibits discrimination and harassment of any type without regard to race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state or local laws.
E-Verify
This employer participates in E-Verify and will provide the federal government with your Form I-9 information to confirm that you are authorized to work in the U.S. If E-Verify cannot confirm that you are authorized to work, this employer is required to give you written instructions and an opportunity to contact Department of Homeland Security (DHS) or Social Security Administration (SSA) so you can begin to resolve the issue before the employer can take any action against you, including terminating your employment. Employers can only use E-Verify once you have accepted a job offer and completed the I-9 Form.
Privacy Policy
Here is a link to Morgan & Morgan's privacy policy.
Benefits
- dental insurance
- 401(k)
- paid time off
About this role
Morgan & Morgan's cloud security environment centers on protecting highly sensitive client and legal matter data across a large, multi-state practice. This hands-on engineering role demands deep expertise in Microsoft's security stack—particularly Defender XDR, Sentinel, M365 tenant hardening, Azure, and Entra ID—combined with the ability to design and implement detection workflows, security automation, and identity controls that scale across the firm. You'll own threat detection and response tuning, lead endpoint and cloud hardening initiatives, build automation to reduce manual security work, and increasingly address the unique security challenges of AI and agent-based systems in a legal context where confidentiality and privilege are paramount.
The role suits someone with 4–7+ years as a security engineer in large, regulated organizations who has hands-on experience with KQL, SOAR platforms, vulnerability management, and Microsoft Purview's data governance and compliance capabilities. Prior experience in a law firm or similarly confidentiality-driven environment is preferred, as is demonstrated work securing AWS or GCP. Beyond technical depth, you'll need strong communication skills to translate security posture, incidents, and risk to both technical teams and firm leadership, and you should be comfortable with scheduled after-hours changes.
This is an in-office, full-time position in Orlando or Tampa requiring local candidates. Morgan & Morgan offers medical and dental insurance, a 401(k) plan, paid time off, and paid holidays for full-time staff.
This role's local market on JobMinglr
Pay for this role
The employer didn't post a pay range for this role. That usually means pay is set in negotiation, which favors whoever arrives with numbers. Check ranges on comparable Cloud Security Engineer postings in Orlando, and analyze any offer before you accept it.
Before you apply, worth reading
How JobMinglr reads this job
Every listing here is scored against your profile before you apply: skills overlap, experience level, location and work arrangement, each weighted and explained. You see the score and the reasons, not just a list. How the matching works.