Cloud Security Senior Consultant

6103 Avanade Portugal Company; Lisboa; Presencial; EUR 70 000 - 100 000; Tempo integral

Resumo da oferta

Avanade Portugal seeks a Senior Cloud Security Consultant to assess and enhance security postures for client cloud environments, focusing on Azure services and governance. You will lead security architecture workshops, risk assessments, and remediation planning with direct client interaction.

The role requires strong communication, deep Azure security expertise, and familiarity with compliance frameworks such as NIST, ISO 27001, GDPR, and HIPAA.

Qualificações

• Minimum 5 years of experience in cloud security architecture and assessment within Microsoft Azure environments.
• Deep knowledge of Azure security architecture and cloud-native resiliency patterns.
• Proficient in vulnerability management, risk assessment, and security compliance standards.
• Strong ability to communicate complex security concepts to technical and non-technical stakeholders.
• Hands-on experience with Azure security and governance services such as Defender for Cloud, Sentinel, Key Vault, Entra ID, PIM, Policy, Monitor, and Log Analytics.
• Familiarity with security assessments and frameworks (WARA, Security Assessment Frameworks) and client-facing delivery.
• Knowledge of regulatory requirements (NIST, ISO/IEC 27001, HIPAA, GDPR, FedRAMP).

Responsabilidades

• Assess security posture of customer cloud workloads and environments to identify vulnerabilities and gaps.
• Design security interventions aligned with best practices and compliance requirements.
• Strengthen configurations for Azure security services and governance tools.
• Lead security architecture workshops, risk assessments, and governance reviews with clients.
• Collaborate with security, operations and business teams to align objectives.
• Drive continuous improvement of security processes and controls against evolving threats.
• Ensure adherence to industry frameworks and regulations such as NIST, ISO/IEC 27001, HIPAA, GDPR, and FedRAMP.

Descrição da oferta de emprego

The Cloud Security Senior Consultant will be responsible for assessing and enhancing the security posture of client cloud environments, identifying vulnerabilities, and recommending remediation strategies. This role requires a strong focus on both technical security controls and process governance to ensure resilient, compliant, and secure cloud architectures. You will engage directly with clients, guiding them through security assessments, architecture reviews, and implementation plans. Key Responsibilities Assess the security posture of customer cloud workloads and environments to identify vulnerabilities and gaps. Recommend and design security interventions aligned with best practices and compliance requirements. Evaluate and strengthen configurations for Azure security services, including Microsoft Defender for Cloud, Sentinel, Key Vault, Azure AD (Entra ID), Privileged Identity Management (PIM), Azure Policy, and governance and observability tools such as Azure Monitor and Log Analytics. Lead and facilitate security architecture workshops, risk assessments, and governance reviews with client teams. Collaborate with cross-functional teams to ensure alignment between security, operations, and business objectives. Conduct thorough security risk assessments and ensure mitigation strategies are implemented. Drive continuous improvement of security processes and controls based on evolving threat landscapes and compliance frameworks. Ensure adherence to industry frameworks and regulations such as NIST, ISO/IEC 27001, HIPAA, GDPR, and FedRAMP.

Key Responsibilities

• Assess the security posture of customer cloud workloads and environments to identify vulnerabilities and gaps.
• Recommend and design security interventions aligned with best practices and compliance requirements.
• Evaluate and strengthen configurations for Azure security services, including Microsoft Defender for Cloud, Sentinel, Key Vault, Azure AD (Entra ID), Privileged Identity Management (PIM), Azure Policy, and governance and observability tools such as Azure Monitor and Log Analytics.
• Lead and facilitate security architecture workshops, risk assessments, and governance reviews with client teams.
• Collaborate with cross-functional teams to ensure alignment between security, operations, and business objectives.
• Conduct thorough security risk assessments and ensure mitigation strategies are implemented.
• Drive continuous improvement of security processes and controls based on evolving threat landscapes and compliance frameworks.
• Ensure adherence to industry frameworks and regulations such as NIST, ISO/IEC 27001, HIPAA, GDPR, and FedRAMP.

Required Qualifications

• Minimum 5 years of experience in cloud security architecture and assessment, specifically within Microsoft Azure environments.
• Deep knowledge of Azure security architecture and cloud-native security resiliency patterns.
• Strong experience with security frameworks and methodologies (e.g., NIST CSF, ISO/IEC 27001).
• Proficient in vulnerability management, risk assessment, and security compliance standards.
• Ability to communicate complex security concepts clearly to both technical and non-technical stakeholders.
• Strong written and verbal communication and documentation skills.
• Hands-on experience with Azure security and governance services: Microsoft Defender for Cloud, Sentinel, Key Vault, Azure AD (Entra ID), PIM, Azure Policy, Azure Monitor, and Log Analytics.
• Familiarity with Microsoft Security Assessments, such as the Well-Architected Review Assessment (WARA) and Microsoft Security Assessment Frameworks.
• Experience working directly with clients in customer-facing roles to deliver security assessments and solutions.
• Solid understanding of process governance, security incident response planning, and Major Incident Response Plan (MIRP) development.

Preferred qualifications

• Strong consulting experience with direct client engagement and workshop facilitation.
• Familiarity with SOC integration, security operations center workflows, and incident response coordination.
• Experience with compliance frameworks such as HIPAA, GDPR, FedRAMP, or equivalent.
• Expertise with SIEM/SOAR tools, automation, and security orchestration.
• Proven track record delivering executive-level security architecture reviews and recommendations.

Certifications Required

• Microsoft Certified: Cybersecurity Architect Expert
• ITIL Foundation Certification
• Preferred: Microsoft Certified: Azure Security Engineer Associate
• Certified Information Systems Security Professional (CISSP)
• Microsoft Certified: Security Operations Analyst Associate
• Microsoft Certified: Identity and Access Administrator Associate
• Microsoft Certified: Azure Administrator Associate
• Business Continuity and Disaster Recovery (BC/DR) certifications such as CBCP, MBCI, ISO 22301, or equivalent industry-recognized certifications .

At Avanade, we advance the world through the power of people and Microsoft. Join us to shape your skills and the future with bold ideas and innovative solutions. Our partnership with Microsoft and Accenture empowers you to unlock your full potential. Working at Avanade offers the chance to build a career path that suits your skills and interests and the freedom to be your authentic self. We are committed to your growth, well-being, and success. This is where passion meets opportunity, technology meets humanity, and every challenge is a chance to make a genuine impact on colleagues, clients, and communities. Together, we do what matters.