Cyber Security Consultant

Malomatia; Doha; On-site; QAR 134,000 - 268,000; Full time

Job summary

Malomatia is seeking a Cybersecurity Consultant in Doha to strengthen the organisation’s security posture across cloud and on‑premises infrastructure. You will work with Infrastructure, Cloud, Network, DevOps, and IT teams to identify weaknesses, implement controls, and coordinate remediation activities.

The role covers security engineering, identity and access management, cloud and network security, vulnerability management, and DevSecOps integration.

Qualifications

• Bachelor’s degree in a related field or equivalent practical experience.
• 2–4 years of cybersecurity, security engineering, cloud security, or related roles.
• Hands-on with security technologies across identity, cloud, network, cryptography, and API security.
• Willingness to expand expertise across the wider security environment.

Responsibilities

• Security Engineering: implement and improve cybersecurity controls across cloud and on‑premise environments.
• Identity Security: support Entra ID and Active Directory including MFA and access reviews.
• Cloud Security: harden Azure and GCP environments, including logging and encryption.
• Network Security: assist with segmentation, VPNs, and firewall security such as FortiGate.
• Vulnerability Management: run scans, prioritise risks, coordinate remediation, verify fixes.
• cryptography and Secrets: manage keys and certificates with vaults and cloud KMS.
• API Security: assess controls for authentication, encryption, gateways, and access controls.
• DevSecOps: integrate security into CI/CD with SAST, scanning, IaC, and container security.
• IaC Security: review Terraform configs to strengthen infrastructure as code.
• Incident Response: assist with investigations, remediation, and lessons learned.
• Security Policies: contribute to standards, baselines, and procedures.
• Security Assessments: provide input for architecture reviews and audits.

Skills

Azure Cloud

GCP

Entra ID / Active Directory

Vault / Key Vault / Secrets

Cryptography / PKI

API security / gateways

Terraform / IaC

DevSecOps / CI/CD security

Vulnerability management

Scripting (Python / PowerShell / Bash)

FortiGate firewall

Windows / Linux

Education

Bachelor’s degree in Cybersecurity / IT / CS or related

Tools

Terraform

HashiCorp Vault

Azure Key Vault

GCP Secret Manager

FortiGate

Job description

Job Description:

The Cybersecurity Consultant will be responsible for strengthening the organisation’s cybersecurity posture across cloud and on-premises infrastructure, identity and access management, network security, application/API security, cryptography, secrets management, vulnerability management, and DevSecOps. The role will collaborate with Infrastructure, Cloud, Network, DevOps, and IT teams to identify security weaknesses, implement controls, improve configurations, and coordinate remediation activities.

Key Responsibilities:

• Security Engineering: Implement, configure, and improve cybersecurity controls across cloud and on-premises environments.
• Identity Security: Support Microsoft Entra ID and Active Directory, including MFA, Conditional Access, privileged access management, and access reviews.
• Cloud Security: Assess and harden Microsoft Azure and GCP environments, covering identity, network security, logging, encryption, and secure configurations.
• Network Security: Support network segmentation, access controls, VPNs, and firewall security, including FortiGate.
• Vulnerability Management: Perform vulnerability scans, analyse findings, prioritise risks, coordinate remediation, and validate fixes.
• Cryptography and Secrets Management: Support cryptographic keys, certificates, encryption, secrets, and credentials using HashiCorp Vault, Azure Key Vault, GCP Secret Manager, or equivalent solutions.
• API Security: Assess API security controls, including authentication, authorisation, encryption, access controls, API gateways, and common vulnerabilities.
• DevSecOps: Integrate security into CI/CD pipelines through SAST, dependency scanning, secrets detection, container security, and IaC security.
• Terraform and IaC Security: Review Terraform configurations and improve security controls across Infrastructure as Code environments.
• Incident Response: Support security investigations, incident response, remediation, and lessons learned.
• Security Policies and Standards: Contribute to cybersecurity policies, technical standards, hardening baselines, and security procedures.
• Security Assessments: Provide cybersecurity input for technology projects, architecture reviews, risk assessments, and audits.
• Automation and Continuous Improvement: Identify automation opportunities and implement security improvements to strengthen the organisation’s security posture.

Required Skills:

Experience or exposure to the following technologies and domains:

• Microsoft Entra ID and Active Directory
• Microsoft Azure and Google Cloud Platform (GCP)
• HashiCorp Vault, Azure Key Vault, and GCP Secret Manager
• Cryptography, PKI, certificates, encryption, and key management
• API security and API gateways
• Windows/Linux infrastructure and network segmentation
• FortiGate or equivalent enterprise firewalls
• Vulnerability scanning and management tools
• Terraform and Infrastructure as Code (IaC)
• DevSecOps and CI/CD security
• Security monitoring and incident response
• Python, PowerShell, Bash, or similar scripting languages

Qualifications and Experience:

• Bachelor’s degree in Cybersecurity, IT, Computer Science, or a related field, or equivalent practical experience.
• 2–4 years of experience in cybersecurity, security engineering, cloud security, infrastructure security, or related technical roles.
• Practical understanding of cybersecurity, networking, identity, cloud, infrastructure, cryptography, secrets management, and API security.
• Hands-on experience with several relevant technologies and willingness to develop expertise across the wider security environment.
• Strong analytical, problem-solving, troubleshooting, and communication skills.
• Strong written and verbal English communication skills.

Desirable Certifications:

• CompTIA Security+ or CySA+
• Microsoft or Google Cloud security certifications
• Fortinet certifications
• HashiCorp or Terraform certifications
• CCSP or CISSP
• GIAC certifications