Presales Consultant - Cybersecurity

Noventiq India, Ltd.; Dubai; On-site; AED 450,000 - 750,000; Full time

Job summary

Noventiq India, Ltd. is seeking a senior Security Presales Architect in Dubai to lead discovery, architect identity, endpoint, and data security across hybrid environments.

You will develop and present security roadmaps for large enterprises, defining Zero Trust, XDR, CSPM/CNAPP, and email security postures. The role requires deep experience in security architectures, strong communication with executives, and the ability to translate complex requirements into practical, scalable solutions.

Qualifications

• Bachelor's degree in a relevant field and 10+ years of cybersecurity experience preferred.
• Proven presales/solution-architecture background in security domains.
• Strong communication and stakeholder-management skills across CISO-level conversations.

Responsibilities

• Lead technical discovery and qualification; translate business, risk and compliance requirements into security architectures across identity, endpoint, email, data, cloud, network and SOC domains.
• Design Identity & Zero Trust frameworks including MFA/passwordless, privileged access, and hybrid identity strategies.
• Architect EDR/XDR deployments across Windows, macOS, Linux and mobile with strategy for onboardings and automated responses.
• Design layered email protection, DMARC/DKIM/SPF, and secure collaboration architectures.
• Produce demonstrations, POCs, and hands-on labs; lead technical close and create clear deployment runbooks.

Skills

Identity & Zero Trust

Endpoint XDR

Email Security

SIEM / SOAR

Cloud Security

Network Security

Solution Architecture

Presales Experience

Education

Bachelor's degree in Computer Science / IT

Tools

Microsoft Entra Defender

Sentinel

Purview

Defender for Cloud

Fortinet FortiGate

Check Point

Cisco Security

Job description

10 - 18 Years

Full-Time

Job Description

K ey Responsibilities

• Leadtechnical discovery and qualification; translate business, risk and compliancerequirements into target security architectures across identity, endpoint,email, data, cloud, network and SOC domains.
• Identity& Zero Trust: design Conditional Access policyframeworks, privileged access management, identity governance (access reviews,entitlement management, lifecycle workflows), hybrid identity, MFA /passwordless, and Zero Trust network access (Entra Global Secure Access, CiscoDuo / Secure Access, Fortinet ZTNA, Check Point Harmony SASE).
• Endpoint& XDR: architect EDR / XDR deployments acrossWindows, macOS, Linux and mobile — onboarding strategy,attack-surface-reduction and hardening baselines, automated investigation andresponse, identity threat detection (Defender for Identity), vulnerabilitymanagement — using Defender XDR, FortiEDR / FortiXDR, Check Point HarmonyEndpoint or Cisco Secure Endpoint.
• Email& Collaboration Security: design layered emailprotection (Defender for Office 365 / Exchange Online Protection with Mimecast,Check Point Harmony Email or Cisco Secure Email), including connector, MX andoutbound-routing design, DMARC / DKIM / SPF, attack simulation and awarenesstraining.
• SIEM,SOAR & SOC Modernisation: design Sentinel andFortiSIEM / FortiSOAR solutions — data-connector strategy, log ingestiontiering and Data Collection Rules, analytics and hunting content, SOARplaybooks, single vs multi-workspace and multi-tenant (Lighthouse) designs,Security Copilot — plus migration runbooks from Splunk, QRadar, ArcSight andLogRhythm and MDR / managed SOC service definitions.
• DataSecurity & DLP: design data-classification andDLP programmes with Purview (sensitivity labels, auto-labelling, Endpoint /Cloud / Exchange DLP, Insider Risk, Data Lifecycle, eDiscovery) and ForcepointDLP / Risk-Adaptive Protection / Forcepoint ONE, including co-existence designswhere Purview labels act as Forcepoint classifiers.
• CloudSecurity Posture: architect CSPM / CNAPP and CASB /SSPM solutions — Defender for Cloud (multi-cloud AWS / GCP onboarding, workloadprotection, regulatory compliance dashboards), Defender for Cloud Apps, CheckPoint CloudGuard, Fortinet FortiCNAPP, Cisco Multicloud Defense.
• NetworkSecurity & SASE: design NGFW, segmentation,SD-WAN and SSE architectures with Fortinet Security Fabric (FortiGate,FortiManager, FortiAnalyzer), Check Point Quantum / Maestro, Cisco SecureFirewall, Umbrella and Secure Access, and Azure Firewall Premium / WAF / DDoSProtection.
• Integrationarchitecture: produce reference designs showingtelemetry and control-plane integration between network, endpoint and emailcontrols and the SIEM / XDR layer (API connectors, CEF / Syslog via AMA,automated response through FortiGate, Check Point and Cisco APIs).
• Delivercompelling demonstrations, proofs of concept, pilots and hands-on workshops;own the technical close on every opportunity you are assigned to.
• Respond toRFPs, RFIs and tenders with high-quality technical write-ups, compliancematrices and architecture diagrams, and lead technical clarification sessionswith evaluation committees.
• ProduceStatements of Work, high-level designs and effort estimates, and run astructured handover to the delivery / SOC teams on every won deal.

Commercial Modelling – Bills of Materials & Licensing

• Buildlicensing models across Microsoft 365 E3 → E5 step-ups, E5 Security and E5Compliance add-ons, F-series, and standalone SKUs (Entra ID P1 / P2 / Suite,Defender for Endpoint P1 / P2, Defender for Office 365 P1 / P2, Intune Plans,Purview add-ons), mapping each customer requirement to the minimum SKU thatunlocks the capability.
• Modelcloud consumption for security workloads: SIEM ingestion (pay-as-you-go vscommitment tiers, Basic / Auxiliary log tiers, retention and archive),per-resource CSPM / CWPP pricing, firewall / WAF / DDoS, automation andlog-analytics costs, and Security Copilot SCU sizing — presented as monthly andannual run-rate with 3-year projections.
• Build BoMsand subscription models: Fortinet (hardware bundles, FortiCare / FortiGuardtiers, FortiFlex points), Check Point (appliances, software blades / Infinitysubscriptions, Harmony per-user), Cisco (Enterprise Agreements, Duo / Umbrella/ Secure Access tiers, Secure Firewall Threat Defense licences), Forcepoint andMimecast per-user plans — with renewal co-termination and multi-year options.
• ProduceTCO and consolidation business cases quantifying licence rationalisation (e.g.retiring standalone MFA, EDR, CASB or email security), SIEM ingestion vsincumbent SIEM licensing, hardware-refresh avoidance and operational savingsfrom unified XDR — and justify best-of-breed retention where platform-nativecontrols do not meet the requirement (data sovereignty, OT / networksegmentation, regulatory constraints, feature gaps).

Security Practice Development

• Act as theprimary SME for identity / Zero Trust, XDR, SIEM / SOC and data-securitysolutions: maintain reference architectures, demo and lab environments,assessment playbooks (Zero Trust maturity, Secure Score, data-risk and SOCmaturity assessments) and standard proposal content.
• Supportthe practice roadmap: capability mapping across security domains, identifyingskill gaps, and mentoring presales and delivery engineers.
• Buildrelationships with vendor partner-facing teams (partner development managers,technical specialists, channel SEs) and contribute to joint account plans andco-sell motions.
• Staycurrent on vendor roadmaps, competitive positioning and partner-programmerequirements; maintain the certifications needed to keep partner tiers anddeal-registration eligibility.
• Partnerwith account managers on opportunity qualification, deal strategy andforecasting; contribute to pipeline generation through customer events,webinars, briefings and assessment-led campaigns.
• Enable theaccount-management team on security propositions, talk tracks and qualificationquestions across all solution domains.
• Contributeto solution playbooks and bundled offerings for priority domains: Zero Trust,Data Protection, Cloud / SaaS Security Posture, GRC and SOC Modernisation /MDR.
• Maintainaccurate opportunity, BoM and technical-status records in CRM and vendordeal-registration portals.

Experience

• 10 years +in cybersecurity, including at least 6+ years in a customer-facing presales,solution-architecture or consulting role with a system integrator, MSSP,reseller or vendor.
• Demonstrabletrack record of designing and winning enterprise or public-sector opportunitiesin at least three of: identity & Zero Trust, XDR, SIEM / SOAR, DLP / datasecurity, CSPM / CNAPP, email security, NGFW / SASE.
• Hands-onor design-level experience with Entra / Defender XDR / Sentinel / Purview andwith at least two of: Fortinet, Check Point, Cisco Security, Forcepoint,Mimecast.
• Experiencewith SIEM migration and SOC modernisation projects and with positioning MDR ormanaged security services.
• UAE marketexperience including familiarity with UAE IA / NESA, DESC and sectorregulators.

Technical Competency Matrix

SolutionDomain

Technologies& Platforms

ExpectedDepth

Identity, Access & Zero Trust

Entra ID (Conditional Access, PIM, ID Governance,Global Secure Access), Cisco Duo, Cisco ISE / NAC, Fortinet ZTNA (FortiClient/ FortiSASE), Check Point Harmony SASE; PAM / IGA (CyberArk, BeyondTrust,SailPoint) at positioning level

Expert – design and lead

Endpoint Security & XDR

Defender for Endpoint / Defender XDR, Defender forIdentity, Defender Vulnerability Management, Intune security baselines;FortiEDR / FortiXDR, Check Point Harmony Endpoint, Cisco Secure Endpoint;CrowdStrike / SentinelOne (partner-led)

Expert – design and lead

Defender for Office 365, Exchange OnlineProtection; Mimecast (SEG, Targeted Threat Protection, Awareness Training,Archiving, DMARC); Check Point Harmony Email & Collaboration; CiscoSecure Email

Expert – design and lead

SIEM, SOAR & SOC Modernisation

Sentinel (connectors, AMA / DCR, log tiering,analytics, hunting, Logic Apps playbooks, Lighthouse), Security Copilot;FortiSIEM / FortiSOAR; migration from Splunk, QRadar, ArcSight, LogRhythm;MDR / managed SOC service design

Expert – design and lead

Data Security & DLP

Purview (sensitivity labels, auto-labelling,Endpoint / Cloud / Exchange DLP, Insider Risk, Data Lifecycle, eDiscovery),Forcepoint DLP / Risk-Adaptive Protection, Forcepoint ONE, dataclassification and DSPM tooling

Expert – design and lead

Cloud Security Posture (CSPM / CNAPP / CASB)

Defender for Cloud (Defender CSPM, Servers,Containers, Storage, SQL; AWS / GCP onboarding), Defender for Cloud Apps(CASB, SaaS security posture, app governance); Check Point CloudGuard,Fortinet FortiCNAPP, Cisco Multicloud Defense; third-party SSPM

Network Security & SASE

Fortinet Security Fabric (FortiGate NGFW / SD-WAN,FortiManager, FortiAnalyzer), Check Point Quantum (Maestro, Smart-1), CiscoSecure Firewall / FMC, Umbrella, Secure Access SSE; Azure Firewall Premium,WAF (App Gateway / Front Door), DDoS Protection

GRC & Security Advisory

Zero Trust and security-maturity assessments,Secure Score / Compliance Manager, NIST CSF, ISO 27001, UAE IA / NESA, DESC,Qatar NCSA, PCI DSS; risk assessments and roadmap workshops

Working – advise

Certifications

Required (orachieved within 6 months of joining):

• MicrosoftSC-100 (Cybersecurity Architect Expert) and at least two of SC-200, SC-300,SC-400, AZ-500.
• One vendorpresales / design certification from the third‑party portfolio (Fortinet NSE4–7 / FCP-FCSS, Check Point CCSA / CCSE, Cisco CCNP Security, Forcepoint orMimecast certified engineer).

Preferred:

• Priorpresales experience with Microsoft Security in a partner or Microsoft-alignedrole, including co-sell and funded-programme engagement, is strongly preferred.
• AdditionalMicrosoft certifications (MS-102, MD-102, AZ-305) or vendor architect-levelcredentials (Fortinet NSE 7 / FCSS, Check Point CCSM, Cisco CCIE Security).

Professional & Soft Skills

• Executivepresence: able to run a CISO-level conversation on strategy and risk, thenwhiteboard the architecture with the security engineering team in the samemeeting.
• Strongcommercial acumen: licensing optimisation, consolidation business cases and TCOmodelling across platform and point-solution offerings.
• Excellentwritten English for proposals, tenders and design documents; Arabic is anadvantage.
• Self-directed,organised and comfortable managing multiple concurrent opportunities across tworegions in a shared-specialist model.
• Collaborativemindset — works effectively with account managers, regional presales anchors,cloud / workplace sales teams, vendor partners and delivery / SOC.