Senior Azure Cloud Security Consultant (m/w/d)

NVISO Security; München; Hybrid; EUR 69.000 - 91.000; Vollzeit

Benefits dieser Stelle

Training budget and continuing ed

60 days home office within EU

Flexible hours

Company pension

Office in Frankfurt or Munich

Zusammenfassung

NVISO Security is seeking a Senior Azure Cloud Security Consultant (m/w/d) in Germany to join our Cloud Security team. The role focuses on designing, implementing, and maintaining robust security and monitoring architectures within a multi-tenant Azure environment, with emphasis on logging and data insights.

You will work on Azure Lighthouse deployments, Microsoft Sentinel, and data exploration with Azure Data Explorer, while collaborating with stakeholders and documenting architectures for

Qualifikationen

• At least 4 years of experience working with Azure infrastructure.
• Proven experience with Azure Lighthouse, Microsoft Sentinel, and Azure Data Explorer are desirable.
• Familiarity with deploying and managing security logging and monitoring solutions.
• Strong understanding of log management and data flow design.
• Experience with automation and scripting using Azure DevOps, Azure Functions, and Azure Logic Apps.
• Certifications are a plus (e.g., SC-200, AZ-500, CISSP, CCSP).

Aufgaben

• Design and implement Azure Lighthouse to manage Sentinel workspaces across a multi-tenant environment.
• Oversee security logging and monitoring platform deployment and maintenance in Azure.
• Define log data onboarding strategies to Microsoft Sentinel and Azure Data Explorer.
• Develop and maintain log flows across on-premises, SaaS, APIs, and Azure resources.
• Implement Azure Data Explorer clusters, databases and tables.
• Create data connectors using Azure Functions and Azure Logic Apps.
• Define Azure Policies and remediation actions for logging components.
• Automate deployments with Azure DevOps Pipelines and ARM templates.
• Conduct cloud security monitoring by defining use cases to detect threats.
• Collaborate with stakeholders to deploy resources and security measures.
• Document HL/LL designs and as-built architectures.

Kenntnisse

Azure security architecture

Cloud security

Logging & monitoring

Multi-tenant Azure

Tools

Azure Lighthouse

Microsoft Sentinel

Azure Data Explorer

Azure DevOps

Azure Functions

Azure Logic Apps

ARM templates

Azure Policy

Jobbeschreibung

It all starts with the mission: NVISO is here to protect European society from potentially devastating cyber attacks! This means we offer cyber security services to private and governmental organizations to help them better prepare for, prevent, detect and respond to cyber security incidents.

All of this is built on four fundamental values that define who we are: We are Proud, We Break Barriers, We Care and No BS!

It all starts with the mission: NVISO is here to protect European society from potentially devastating cyber attacks! This means we offer cyber security services to private and governmental organizations to help them better prepare for, prevent, detect and respond to cyber security incidents.

All of this is built on four fundamental values that define who we are: We are Proud, We Break Barriers, We Care and No BS!

Tasks

We are seeking a skilled and experienced Senior Azure Cloud Security Consultant (m/w/d) located in Germany to join our Cloud Security team. The ideal candidate will have a strong background in Azure cloud services, with a particular focus on security, logging, and monitoring solutions. This role involves designing, implementing, and maintaining robust security and monitoring architectures within a multi-tenant Azure environment.

• Design and implement Azure Lighthouse to effectively manage Microsoft Sentinel workspaces across a multi-tenant environment.
• Oversee the implementation and maintenance of the security logging and monitoring platform in Azure, including designing the architecture, to provide comprehensive security insights and data protection.
• Define and implement strategies for log data onboarding to Microsoft Sentinel and Azure Data Explorer cluster, ensuring accurate and efficient log management.
• Develop and maintain log flows across the environment, integrating on-premises systems, SaaS solutions, third-party APIs, Azure resources, and Microsoft services for seamless log collection and forwarding.
• Implement, configure, and maintain Azure Data Explorer clusters, databases, and tables.
• Create custom data connectors using Azure Functions and Azure Logic Apps to facilitate data integration.
• Define Azure Policies and implement remediation actions to automatically configure logging components within the Azure Cloud.
• Automate deployments of Azure resources using Azure DevOps Pipelines, and define Azure Resource Manager templates to standardize and streamline resource provisioning.
• Conduct cloud security monitoring by defining relevant use cases to detect and respond to security threats efficiently.
• Collaborate with various stakeholders to ensure the successful implementation and deployment of resources, configurations, and security measures.
• Document high-level (HL) and low-level (LL) designs, as-built architecture, processes, and create detailed implementation documents to maintain accurate records and facilitate knowledge transfer.

Requirements

• ou hold a citizenship of a NATO member state or the Austrian citizenship;
• At least 4 years of experience working with Azure infrastructure;
• Proven experience with Azure cloud services, specifically Azure Lighthouse, Microsoft Sentinel, and Azure Data Explorer are desirable;
• Familiarity with deploying and managing security logging and monitoring solutions;
• Strong understanding of log management and data flow design;
• Experience with automation and scripting using Azure DevOps, Azure Functions, and Azure Logic Apps;
• Knowledge of Azure Policies, ARM templates, and cloud security best practices;
• Excellent collaboration and communication skills to effectively work with a diverse range of stakeholders;
• Detail-oriented and with strong documentation skills;
• Certifications are a plus. Microsoft’s SC-200, AZ-500, etc., and vendor agnostic: CISSP, CCSP, CompTIA Security+;

Benefits

At NVISO, we care. We are committed to offering you a highly competitive remuneration package including financial and non-financial components:

• A training budget of 10,000 EUR plus 10 days paid time off rolling over two years;
• Working with and learning from the best people in the European cyber security "scene". We have several SANS Instructors working for us and we are also represented at popular hacking conferences (BlackHat, BruCON, OWASP, etc.). In addition, our employees can take advantage of prestigious continuing education opportunities (GSE, GXPN, CISSP, OSCP, etc.);
• A forward-thinking and agile company that supports you in the creation and implementation of new initiatives;
• Unique team events (most recently e.g. Lisbon, Dubai, Malta);
• Base salary range (depending on experience and skillset): 69.000 EUR p.a. – 91.000 EUR p.a.;
• A sophisticated coaching concept starting on day 1;
• 30 days of vacation;
• Flexible working hours and home office options (Working Abroad Option within the EU up to 60 days);
• Cost absorption for Deutschlandticket and the BahnCard50;
• Company bike leasing;
• Company pension scheme;
• A cool office in the heart of Frankfurt / Munich (roof terrace with grill, football, Playstation 4).

Disclaimer on the Use of AI Tools in the Application Process

Please be aware that the creation and submission of application documents (e.g. CV, cover letter, case studies, etc.) using AI-powered tools is only permitted to a limited extent.

Our expectations:

• Application documents must authentically reflect your own qualifications, personality, and motivation.
• The use of AI for supportive purposes (e.g. spell-checking, improving wording) is acceptable.
• Fully generated application documents created by AI without personal adaptation or review are not permitted.
• Under no circumstances may NVISO information, data, or documents be uploaded to or processed by external AI tools.

We reserve the right to exclude applications from the selection and interview process that are clearly created primarily or exclusively by AI and show no recognizable personal input.

The purpose of this policy is to ensure a fair and transparent recruitment process and to obtain an authentic impression of our applicants.