Cloud Security Engineer

Job Overview

We are looking for a skilled Cloud Security Engineer/Analyst to join our Cybersecurity team. You will collaborate with cloud, infrastructure, and security teams to develop, implement, and uphold security measures that safeguard our clients' cloud environments.

Key Responsibilities

• Evaluate cloud setups across public, private, and hybrid platforms to highlight security vulnerabilities and devise effective security controls.
• Implement governance frameworks encompassing security policies, standards, and control measures aligned with organizational and regulatory norms.
• Deploy and manage cloud security monitoring tools to identify misconfigurations, threats, and vulnerabilities, and address incidents promptly.
• Oversee secure identity and access management practices, including role-based access, least privilege, and authentication methods.
• Ensure that cloud environments conform to organizational policies, regulatory standards, and perform continuous compliance checks.
• Partner with DevOps and cloud engineering teams to embed security within CI/CD pipelines and automate security processes.
• Assess, apply, and manage cloud-native security platforms such as Palo Alto Prisma Cloud and Microsoft Defender covering posture management, workload security, identity protection, and runtime threat detection.
• Develop and maintain thorough documentation and reports related to cloud security operations and architectures.
• Lead training efforts to enhance security awareness among cloud, infrastructure, and development teams.

Qualifications & Experience

• Bachelor’s or college degree in Computer Science, Information Security, or related disciplines.
• Minimum of 3 years’ experience in cloud security, cloud infrastructure, or cybersecurity operations.
• Certifications such as Oracle Cloud Infrastructure Security Professional, Microsoft Azure Security Engineer Associate (AZ-500), or equivalents in AWS, GCP, CSA, GIAC, CompTIA, ISC2 are highly valued.
• Hands-on expertise with security and monitoring solutions including Microsoft Defender for Cloud, Azure Policy, Entra ID, OCI Cloud Guard, IAM configuration, network security mechanisms, encryption and key management, and logging/monitoring services.
• Experience with Infrastructure as Code tools like Terraform, ARM, or Bicep and integrating security into automated deployment processes.

Knowledge & Skills

• Comprehensive understanding of cloud security concepts including shared responsibility models, identity governance, network segmentation, system hardening, vulnerability control, and cloud-specific incident response.
• Familiarity with security standards and frameworks such as CIS Benchmarks, NIST, ISO 27001, CSA Cloud Controls Matrix, and DevSecOps principles.
• Knowledge of Qatar National Information Assurance (NIA) framework is advantageous.