Cloud Security Consultant

Overview

We are looking for a knowledgeable Microsoft Security Consultant to join our Cybersecurity team in Doha, Qatar. This role involves collaborating closely with cloud, infrastructure, and security teams to design, deploy, and manage security controls within Microsoft's security portfolio, safeguarding clients' cloud and hybrid systems.

Key Duties

• Deploy and manage Microsoft Defender suite (Defender for Endpoint, Cloud, Office 365, Identity) and Microsoft Purview for data governance, loss prevention, information protection, insider risk management, and compliance.
• Evaluate existing Microsoft 365 and Azure environments to identify security vulnerabilities, reinforce configurations to industry baselines, and continuously monitor for system and data security.
• Support secure adoption and configuration of Microsoft 365, Azure, and hybrid cloud services in alignment with organizational policies, international standards such as Microsoft Cloud Security Benchmark, CIS, NIST, and Qatari regulations.
• Implement identity and access management strategies using Microsoft Entra ID, including conditional access, role-based access, multifactor authentication, and Privileged Identity Management.
• Operate security monitoring and threat detection tools such as Microsoft Defender and Sentinel to detect misconfigurations and security incidents, establish detection rules, investigate alerts, and facilitate timely remediation.
• Design and uphold cloud security governance structures including policies, standards, and roles, supported by Azure Policy, Defender regulatory compliance features, and Purview capabilities.
• Apply native Azure security measures including network security groups, encryption with Azure Key Vault, and enforce logging and monitoring practices.

Candidate Requirements

• Bachelor’s degree or equivalent in Computer Science, IT, or related discipline.
• Minimum 3 years of practical experience installing and maintaining Microsoft 365 and Azure security solutions, especially with Microsoft Defender and Purview implementations.
• Possession of relevant certifications highly recommended, including Microsoft Certified: Security Operations Analyst Associate (SC-200), Identity and Access Administrator Associate (SC-300), Information Protection and Compliance Administrator Associate (SC-400), Azure Security Engineer Associate (AZ-500), Cybersecurity Architect Expert (SC-100), and architecture or administration certifications such as AZ-104 or AZ-305. Vendor-neutral certifications like CISSP, CCSP, CSA CCSK, or GIAC are advantageous.
• Hands-on expertise with Microsoft security technologies: Defender suite, Sentinel, Purview, Entra ID, along with foundational Azure services like compute, storage, networking, and security tooling.
• Comprehensive understanding of cloud architecture frameworks, security principles such as Zero Trust, least privilege access, network segmentation, encryption, and practical application of Microsoft technologies supporting these concepts.
• Familiarity with compliance frameworks including Microsoft Cloud Security Benchmark, CIS Benchmarks, NIST, ISO 27001, with added knowledge of Qatar National Information Assurance preferred.