Senior Azure Cloud Security Consultant (m/w/d)

Nviso; Brussel Hoofdstad; Hybride; EUR 95 000 - 140 000; Plein temps

Avantages offerts par ce poste

Training budget €10,000 + 10 days PTO

Conference participation and ongoing S

Flexible hours

30 days vacation

Home office options within the EU

Company pension

Company bike

Office in Frankfurt/Munich

Résumé du poste

NVISO seeks a Senior Azure Cloud Security Consultant (m/w/d) to lead secure Azure deployments in a multi-tenant environment. You will architect, implement, and monitor Azure security and logging solutions, including Sentinel, Data Explorer, and Lighthouse, collaborating with stakeholders across teams.

You will design data onboarding, automate deployments with DevOps, and ensure policy-driven security. Strong communication and documentation are essential, with certification as a plus.

Qualifications

• At least 4 years of experience working with Azure infrastructure.
• Proven experience with Azure Lighthouse, Microsoft Sentinel, and Azure Data Explorer.
• Familiarity with deploying and managing security logging and monitoring solutions.
• Strong understanding of log management and data flow design.
• Experience with automation and scripting using Azure DevOps, Azure Functions, and Azure Logic Apps.
• Knowledge of Azure Policies, ARM templates, and cloud security best practices.
• Excellent collaboration and communication skills to work with stakeholders.
• Certifications are a plus (e.g., SC-200, AZ-500, CISSP, CCSP, CompTIA Security+)

Responsabilités

• Design and implement Azure Lighthouse to manage Sentinel workspaces across a multi-tenant environment.
• Oversee security logging and monitoring platform deployment and maintenance in Azure.
• Define data onboarding and log data flows to Microsoft Sentinel and Azure Data Explorer.
• Develop and maintain log flows across on-prem, SaaS, and cloud services for seamless collection.
• Implement and maintain Azure Data Explorer clusters, databases, and tables.
• Create custom data connectors using Azure Functions and Azure Logic Apps.
• Define Azure Policies and automated remediation actions for logging components.
• Automate deployments with Azure DevOps Pipelines and ARM templates.
• Conduct cloud security monitoring by defining use cases to detect threats.
• Document HL/LL designs and implementation guides for knowledge transfer.

Connaissances

Azure security

Cloud architecture

Log management

Automation scripting

Documentation

Stakeholder collaboration

Outils

Azure Lighthouse

Microsoft Sentinel

Azure Data Explorer

Azure DevOps

Azure Functions

Azure Logic Apps

ARM templates

Azure Policies

PowerShell

Azure CLI

Description du poste

Senior Azure Cloud Security Consultant (m/w/d)

Who are we?

It all starts with the mission: NVISO is here to protect European society from potentially devastating cyber attacks! This means we offer cyber security services to private and governmental organizations to help them better prepare for, prevent, detect and respond to cyber security incidents.

All of this is built on four fundamental values that define who we are: We are Proud, We Break Barriers, We Care and No BS!

What will you do?

We are seeking a skilled and experienced Senior Azure Cloud Security Consultant (m/w/d) located in Germany to join our Cloud Security team. The ideal candidate will have a strong background in Azure cloud services, with a particular focus on security, logging, and monitoring solutions. This role involves designing, implementing, and maintaining robust security and monitoring architectures within a multi-tenant Azure environment.

• Design and implement Azure Lighthouse to effectively manage Microsoft Sentinel workspaces across a multi-tenant environment.
• Oversee the implementation and maintenance of the security logging and monitoring platform in Azure, including designing the architecture, to provide comprehensive security insights and data protection.
• Define and implement strategies for log data onboarding to Microsoft Sentinel and Azure Data Explorer cluster, ensuring accurate and efficient log management.
• Develop and maintain log flows across the environment, integrating on-premises systems, SaaS solutions, third-party APIs, Azure resources, and Microsoft services for seamless log collection and forwarding.
• Implement, configure, and maintain Azure Data Explorer clusters, databases, and tables.
• Create custom data connectors using Azure Functions and Azure Logic Apps to facilitate data integration.
• Define Azure Policies and implement remediation actions to automatically configure logging components within the Azure Cloud.
• Automate deployments of Azure resources using Azure DevOps Pipelines, and define Azure Resource Manager templates to standardize and streamline resource provisioning.
• Conduct cloud security monitoring by defining relevant use cases to detect and respond to security threats efficiently.
• Collaborate with various stakeholders to ensure the successful implementation and deployment of resources, configurations, and security measures.
• Document high-level (HL) and low-level (LL) designs, as-built architecture, processes, and create detailed implementation documents to maintain accurate records and facilitate knowledge transfer.

Requirements

• You hold a citizenship of a NATO member state or the Austrian citizenship;
• At least 4 years of experience working with Azure infrastructure;
• Proven experience with Azure cloud services, specifically Azure Lighthouse, Microsoft Sentinel, and Azure Data Explorer are desirable;
• Familiarity with deploying and managing security logging and monitoring solutions;
• Strong understanding of log management and data flow design;
• Experience with automation and scripting using Azure DevOps, Azure Functions, and Azure Logic Apps;
• Knowledge of Azure Policies, ARM templates, and cloud security best practices;
• Excellent collaboration and communication skills to effectively work with a diverse range of stakeholders;
• Detail-oriented and with strong documentation skills;
• Certifications are a plus. Microsoft’s SC-200, AZ-500, etc., and vendor agnostic: CISSP, CCSP, CompTIA Security+;

What do we offer

At NVISO, we care. We are committed to offering you a highly competitive remuneration package including financial and non-financial components:

• A training budget of 10,000 EUR plus 10 days paid time off rolling over two years;
• Working with and learning from the best people in the European cyber security “scene”. We have several SANS Instructors working for us and we are also represented at popular hacking conferences (BlackHat, BruCON, OWASP, etc.). In addition, our employees can take advantage of prestigious continuing education opportunities (GSE, GXPN, CISSP, OSCP, etc.);
• A forward-thinking and agile company that supports you in the creation and implementation of new initiatives;
• Unique team events (most recently e.g. Lisbon, Dubai, Malta);
• A sophisticated coaching concept starting on day 1;
• 30 days of vacation;
• Flexible working hours and home office options (Working Abroad Option within the EU up to 60 days);
• Cost absorption for Deutschlandticket and the BahnCard50;
• Company bike leasing;
• Company pension scheme;
• A cool office in the heart of Frankfurt / Munich (roof terrace with grill, football, Playstation 4).