Cloud Security Consultant

We are seeking an experienced Microsoft Security Consultant to join our Cybersecurity Practice. In this role, you will work closely with our cloud, infrastructure, and security teams to design, implement, and operate security controls across the Microsoft security stack to protect our clients' cloud and hybrid environments.

Your responsibilities will include deploying and configuring Microsoft Defender (including Defender for Endpoint, Defender for Cloud, Defender for Office 365, and Defender for Identity) and Microsoft Purview for data governance, data loss prevention, information protection, insider risk management, and compliance. You will assess existing Microsoft 365 and Azure environments, identify security gaps, harden configurations against established baselines, and continuously monitor these platforms to ensure the confidentiality, integrity, and availability of systems and data.

You will support the secure adoption of Microsoft cloud services across Microsoft 365, Azure, and hybrid environments, configuring policies and controls that align with organizational requirements, industry standards (such as the Microsoft Cloud Security Benchmark, CIS, and NIST), and Qatari regulatory requirements. This includes implementing conditional access, identity and access management through Microsoft Entra ID, threat detection and response workflows, and compliance and data protection controls through Purview.

Responsibilities

• Microsoft Security Architecture and Assessment: Assess Microsoft 365, Azure, and hybrid environments to identify security risks and design appropriate controls using native Microsoft capabilities. Conduct security reviews of Azure subscriptions, workloads, and configurations across compute, storage, networking, identity, and platform services, using Microsoft Defender for Cloud secure score and recommendations as a baseline. Provide detailed assessment reports with clear, actionable remediation recommendations aligned with the Microsoft Cloud Security Benchmark, CIS, and NIST.
• Microsoft Security Governance: Define, implement, and maintain cloud security governance frameworks, including security policies, standards, baselines, and control frameworks built on Azure Policy, Microsoft Defender for Cloud regulatory compliance, and Purview governance capabilities. Establish clear roles and responsibilities through RACI models and support the development of operating procedures to ensure consistent, repeatable, and auditable security practices across Microsoft environments.
• Security Monitoring and Threat Detection: Implement and operate Microsoft Defender and Microsoft Sentinel to detect misconfigurations, vulnerabilities, and suspicious activities. Analyze alerts and incidents across the Defender XDR portal and Sentinel, build detection rules and analytics, investigate potential incidents, and support timely response and remediation to maintain the confidentiality, integrity, and availability of cloud environments.
• Identity and Access Management: Review and support the secure implementation of identity and access controls through Microsoft Entra ID, including role-based access control, least privilege, conditional access, multifactor authentication, and Privileged Identity Management across Microsoft cloud platforms and services.
• Cloud Security Configuration: Implement native Azure security controls including Microsoft Defender for Cloud, network security groups, encryption, key management (Azure Key Vault), and logging and monitoring to enforce a strong security posture.

Qualifications

• Education: Bachelor's / college degree in Computer Science, Information Technology, or a related field.
• Experience: At least 3 years of hands on experience implementing and configuring Microsoft Azure and Microsoft 365 security solutions, or a closely related role, with demonstrable experience deploying Microsoft Defender and Microsoft Purview.
• Certifications: Relevant professional certifications are highly desirable. These may include, but are not limited to:
• Microsoft Certified: Security Operations Analyst Associate (SC-200)
• Microsoft Certified: Identity and Access Administrator Associate (SC-300)
• Microsoft Certified: Information Protection and Compliance Administrator Associate (SC-400)
• Microsoft Certified: Azure Security Engineer Associate (AZ-500)
• Microsoft Certified: Cybersecurity Architect Expert (SC-100)
• Vendor agnostic security certifications (CISSP, CCSP, CSA CCSK, GIAC, etc.)
• Technical Skills: Strong hands on experience deploying and configuring the Microsoft security stack, including Microsoft Defender (Defender for Cloud, Endpoint, Office 365, and Identity), Microsoft Sentinel, Microsoft Purview, and Microsoft Entra ID. Experience with core Azure services across compute, storage, networking, and identity, along with native security tooling such as Key Vault, Network Security Groups, and Azure Policy.
• Knowledge: Solid understanding of cloud architecture principles and the Microsoft Cloud Adoption Framework and Azure Well Architected Framework. Working knowledge of security concepts including Zero Trust, least privilege, network segmentation, and encryption, with practical understanding of how Microsoft technologies implement them (Conditional Access, Privileged Identity Management, Defender for Cloud secure score). Familiarity with the Microsoft Cloud Security Benchmark, CIS Benchmarks, NIST, and ISO 27001. Knowledge of Qatar National Information Assurance (NIA) is a plus.

About Us

About Malomatia

malomatia is a leading Qatar based IT services and solutions provider, bringing together top Qatari and international talent to deliver innovative, end to end technology solutions that empower clients to achieve their strategic goals.

Our mission

Empowering Qatar's businesses and governments to leap into the digital future with agile, knowledge driven solutions.

Our vision

To become Qatar's trusted knowledge partner in digital transformation, disrupting industries, shaping the future, and building a world class tech ecosystem.

Driving change that makes a real impact

Since 2008, malomatia has been driving Qatar's digital transformation through innovative, ISO certified IT solutions. With expertise across key public and private sectors, we empower the nation's vision with advanced services in cloud, cybersecurity, AI, and contact center excellence, elevating the role of technology in shaping Qatar's sustainable future.

About the Team

Established in 2008, malomatia is a Qatari leader in IT services and digital transformation. We serve key sectors including Government, Healthcare, Education, Customs, and Transportation, delivering impactful solutions that support national development goals. Powered by a diverse team of skilled Qatari and international IT professionals, we deliver innovative, high value digital solutions tailored to the unique needs of our clients.

Our mission is to inspire customers to thrive through digital excellence, and we envision becoming the trusted partner of choice in building a smarter society through technology and talent. We are driven by core values that define our culture and approach: ownership, integrity, empathy, teamwork, transparency, agility, excellence, trust, and innovation.

Established in 2008, malomatia is a Qatari leader in IT services and digital transformation. We serve key sectors including Government, Healthcare, Education, Customs, and Transportation, delivering impactful solutions that support national development goals. Powered by a diverse team of skilled Qatari and international IT professionals, we deliver innovative, high value digital solutions tailored to the unique needs of our clients.

Our mission is to inspire customers to thrive through digital excellence, and we envision becoming the trusted partner of choice in building a smarter society through technology and talent. We are driven by core values that define our culture and approach: ownership, integrity, empathy, teamwork, transparency, agility, excellence, trust, and innovation.

Join us in shaping the future of technology in Qatar