Cloud Security Consultant

Role Overview

We are looking for a skilled Microsoft Security Consultant to join our Cybersecurity Practice team. In this position, you will collaborate with cloud, infrastructure, and security units to architect, deploy, and manage security controls within the Microsoft ecosystem, ensuring the protection of clients' cloud and hybrid setups.

Key Responsibilities

• Evaluate Microsoft 365, Azure, and hybrid infrastructures to detect security weaknesses and architect suitable controls leveraging native Microsoft tools.
• Perform comprehensive security audits of Azure subscriptions and services—including compute, storage, networking, and identity—guided by Microsoft Defender for Cloud secure score benchmarks.
• Deliver detailed assessment reports with actionable fixes aligned with industry benchmarks like Microsoft Cloud Security Benchmark, CIS, and NIST.
• Develop and uphold cloud security governance frameworks encompassing policies, standards, and control frameworks using Azure Policy, Microsoft Defender compliance, and Purview.
• Define clear roles via RACI matrices and create operating procedures for consistent, repeatable, and auditable security practices.
• Deploy and manage Microsoft Defender and Sentinel for real-time monitoring, threat detection, incident investigation, and remediation to protect cloud environments.
• Implement secure identity and access controls with Microsoft Entra ID, including role-based access, least privilege, conditional access, MFA, and Privileged Identity Management.
• Apply Azure-native security measures such as Defender for Cloud, network security groups, encryption, Azure Key Vault, and monitoring to maintain a robust security posture.

Qualifications

• Bachelor’s or college degree in Computer Science, IT, or a related discipline.
• At least 3 years of hands-on practice implementing and managing Microsoft Azure and Microsoft 365 security solutions, with proven expertise deploying Microsoft Defender and Purview.
• Preferred certifications include Microsoft Certified Security Operations Analyst (SC-200), Identity and Access Administrator (SC-300), Information Protection and Compliance Administrator (SC-400), Azure Security Engineer (AZ-500), Cybersecurity Architect Expert (SC-100), Azure Administrator (AZ-104) or Solutions Architect Expert (AZ-305), and vendor-neutral certifications such as CISSP, CCSP, CSA CCSK, or GIAC.
• In-depth knowledge of Microsoft security products including Defender (Cloud, Endpoint, Office 365, Identity), Sentinel, Purview, and Entra ID.
• Strong familiarity with core Azure services (compute, storage, networking, identity) and native security tools like Key Vault, Network Security Groups, Azure Policy.
• Understanding of cloud security principles, including Zero Trust, least privilege, network segmentation, encryption, and practical Microsoft implementations thereof.
• Awareness of security standards and frameworks such as Microsoft Cloud Security Benchmark, CIS, NIST, ISO 27001 and preferred knowledge of Qatar National Information Assurance (NIA).

About Malomatia

Malomatia is a premier Qatar-based IT services and solutions firm established in 2008, renowned for integrating top local and international talents to provide innovative, full-spectrum technology solutions. We empower businesses and governments in Qatar to advance digitally through agile, knowledge-centric offerings.

Our mission is to help Qatar’s entities accelerate digital transformation, underpinned by expertise in cloud, cybersecurity, AI, and contact center excellence. Our vision is to be Qatar’s most trusted technology partner, fostering industry disruption and a world-class tech ecosystem guided by ownership, integrity, empathy, teamwork, transparency, agility, excellence, trust, and innovation.

We support key sectors including government, healthcare, education, customs, and transportation, delivering tailored digital solutions that align with national development objectives.

Additional Information

This role is full-time and onsite in Doha, Qatar. Compensation details are not specified.