Senior Azure Cloud Security Consultant (m/w/d)

NVISO Security; Frankfurt; Hybrid; EUR 69,000 - 91,000; Full time

Benefits offered by this job

Training budget

Flexible hours

Home office

Company pension

Bike leasing

Office in Frankfurt & Munich

Job summary

NVISO is seeking a Senior Azure Cloud Security Consultant to design, implement and operate security and monitoring for a multi-tenant Azure environment in Germany. The role focuses on secure logging architectures, Sentinel workloads, and data protection across tenants with strong collaboration across teams.

You will lead Lighthouse deployments, build connectors with Azure Functions, and automate provisioning via Azure DevOps and ARM templates, while documenting HL/LL designs and keeping

Qualifications

• Citizenship of a NATO member state or Austrian citizenship.
• 4+ years of experience with Azure infrastructure.
• Experience with Azure Lighthouse, Microsoft Sentinel and Azure Data Explorer.
• Familiarity with deploying and managing security logging and monitoring solutions.
• Strong understanding of log management and data flow design.
• Experience with automation via Azure DevOps, Functions and Logic Apps.
• Knowledge of Azure Policies, ARM templates and cloud security best practices.
• Excellent collaboration and documentation skills.
• Certs are a plus (SC-200, AZ-500, CISSP, CCSP, CompTIA Security+).

Responsibilities

• Design and implement Azure Lighthouse to manage Microsoft Sentinel workspaces across a multi-tenant environment.
• Oversee security logging and monitoring platform design and maintenance in Azure.
• Define log onboarding strategies for Microsoft Sentinel and Azure Data Explorer.
• Develop and maintain log flows across on‑prem, SaaS, third‑party APIs, and Azure resources.
• Implement, configure, and maintain Azure Data Explorer clusters, databases, and tables.
• Create custom data connectors using Azure Functions and Azure Logic Apps.
• Define Azure Policies and remediation actions for logging components.
• Automate deployments using Azure DevOps Pipelines and ARM templates.
• Conduct cloud security monitoring by defining use cases to detect threats.
• Collaborate with stakeholders for successful deployments.
• Document HL/LL designs and implementation documents.

Skills

Azure Lighthouse

Microsoft Sentinel

Azure Data Explorer

Azure DevOps

Azure Functions

Azure Logic Apps

ARM templates

logging & monitoring

Tools

Azure Data Explorer

Azure Functions

Azure Logic Apps

Job description

It all starts with the mission: NVISO is here to protect European society from potentially devastating cyber attacks! This means we offer cyber security services to private and governmental organizations to help them better prepare for, prevent, detect and respond to cyber security incidents.

All of this is built on four fundamental values that define who we are: We are Proud, We Break Barriers, We Care and No BS!

Tasks

We are seeking a skilled and experienced Senior Azure Cloud Security Consultant (m/w/d) located in Germany to join our Cloud Security team. The ideal candidate will have a strong background in Azure cloud services, with a particular focus on security, logging, and monitoring solutions. This role involves designing, implementing, and maintaining robust security and monitoring architectures within a multi-tenant Azure environment.

• Design and implement Azure Lighthouse to effectively manage Microsoft Sentinel workspaces across a multi-tenant environment.

• Oversee the implementation and maintenance of the security logging and monitoring platform in Azure, including designing the architecture, to provide comprehensive security insights and data protection.

• Define and implement strategies for log data onboarding to Microsoft Sentinel and Azure Data Explorer cluster, ensuring accurate and efficient log management.

• Develop and maintain log flows across the environment, integrating on-premises systems, SaaS solutions, third-party APIs, Azure resources, and Microsoft services for seamless log collection and forwarding.

• Implement, configure, and maintain Azure Data Explorer clusters, databases, and tables.

• Create custom data connectors using Azure Functions and Azure Logic Apps to facilitate data integration.

• Define Azure Policies and implement remediation actions to automatically configure logging components within the Azure Cloud.

• Automate deployments of Azure resources using Azure DevOps Pipelines, and define Azure Resource Manager templates to standardize and streamline resource provisioning.

• Conduct cloud security monitoring by defining relevant use cases to detect and respond to security threats efficiently.

• Collaborate with various stakeholders to ensure the successful implementation and deployment of resources, configurations, and security measures.

• Document high-level (HL) and low-level (LL) designs, as-built architecture, processes, and create detailed implementation documents to maintain accurate records and facilitate knowledge transfer.

Requirements

• You hold a citizenship of a NATO member state or the Austrian citizenship;

• At least 4 years of experience working with Azure infrastructure;

• Proven experience with Azure cloud services, specifically Azure Lighthouse, Microsoft Sentinel, and Azure Data Explorer are desirable;

• Familiarity with deploying and managing security logging and monitoring solutions;

• Strong understanding of log management and data flow design;

• Experience with automation and scripting using Azure DevOps, Azure Functions, and Azure Logic Apps;

• Knowledge of Azure Policies, ARM templates, and cloud security best practices;

• Excellent collaboration and communication skills to effectively work with a diverse range of stakeholders;

• Detail-oriented and with strong documentation skills;

• Certifications are a plus. Microsoft's SC-200, AZ-500, etc., and vendor agnostic: CISSP, CCSP, CompTIA Security+;

Benefits

At NVISO, we care. We are committed to offering you a highly competitive remuneration package including financial and non-financial components:

• Working with and learning from the best people in the European cyber security "scene". We have several SANS Instructors working for us and we are also represented at popular hacking conferences (BlackHat, BruCON, OWASP, etc.). In addition, our employees can take advantage of prestigious continuing education opportunities (GSE, GXPN, CISSP, OSCP, etc.);

• Generous training budget of 10.000 EUR + 10 man days for attending lectures rolling over 2 years;

• Base salary range (depending on experience and skillset): 69.000 EUR p.a. -- 91.000 EUR p.a.;

• Regular team-building and fun events;

• Our commitment to coach and counsel you and help you grow; each employee receives a personal coach within the team, whose role is to ensure your well-being and helps you grow in your career!

• Flexible working hours and home office possibilities (incl. working abroad weeks within the EU);

• Business Bike Leasing;

• BahnCard 50 1st class + public transfer ticket or EGYM WellPass;

• 30 holidays;

• Company Pension Scheme;

• Cool offices in the center of Frankfurt and Munich (with BBQ, kicker table, table tennis, etc.).

Disclaimer on the Use of AI Tools in the Application Process

Please be aware that the creation and submission of application documents (e.g. CV, cover letter, case studies, etc.) using AI-powered tools is only permitted to a limited extent.

Our expectations:

• Application documents must authentically reflect your own qualifications, personality, and motivation.

• The use of AI for supportive purposes (e.g. spell-checking, improving wording) is acceptable.

• Fully generated application documents created by AI without personal adaptation or review are not permitted.

• Under no circumstances may NVISO information, data, or documents be uploaded to or processed by external AI tools.

We reserve the right to exclude applications from the selection and interview process that are clearly created primarily or exclusively by AI and show no recognizable personal input.

The purpose of this policy is to ensure a fair and transparent recruitment process and to obtain an authentic impression of our applicants.