Network Security Senior Engineer

Malomatia; Doha; On-site; QAR 240,000 - 360,000; Full time

Job summary

Malomatia in Doha is seeking a Senior Network Security Engineer to own and harden the organization’s cloud and Microsoft 365 security posture, with a hands-on engineering focus.

You will manage Entra ID, Defender XDR, and encryption, along with NDR, DLP, PAM, PAW, WAF, SASE, and database security tools, across Windows/Linux and network infrastructure.

Travel to data centers and client sites will be required, with on-call support outside business hours as needed.

Qualifications

• 8–10 years in cloud/cybersecurity engineering, operations and advisory.

Responsibilities

• Solely implement, administer, and manage security controls without service-provider involvement.

Skills

Cloud security

Cybersecurity advisory

Risk assessment

Audit remediation

Vendor management

Tools

Entra ID

Defender XDR

Email encryption

Endpoint encryption

NDR

DLP

PAM

PAW

WAF

SASE

Database security

Job description

Job Description

The Senior Network Security Engineer will serve as the technical owner of the organization’s cloud and Microsoft 365 security posture, with a primarily hands-on focus on engineering, configuring, and administering cloud-native security controls independently, without reliance on service providers. The role will focus on Entra ID, Defender XDR, and email and endpoint encryption, alongside hands-on management of NDR, DLP, PAM, PAW, WAF, SASE, and database security solutions. Key responsibilities include securing Microsoft and Oracle applications, hardening Windows/Linux systems and network infrastructure, conducting risk assessments, addressing audit findings, providing cybersecurity advisory, and leading security implementation projects.

Job Description

The Senior Network Security Engineer will serve as the technical owner of the organization’s cloud and Microsoft 365 security posture, with a primarily hands-on focus on engineering, configuring, and administering cloud-native security controls independently, without reliance on service providers. The role will focus on Entra ID, Defender XDR, and email and endpoint encryption, alongside hands-on management of NDR, DLP, PAM, PAW, WAF, SASE, and database security solutions. Key responsibilities include securing Microsoft and Oracle applications, hardening Windows/Linux systems and network infrastructure, conducting risk assessments, addressing audit findings, providing cybersecurity advisory, and leading security implementation projects.

Responsibilities

• Solely implement, administer, and manage (out-of-the-box, no service-provider involvement): Azure Entra Suite (IAM), Microsoft Defender for Endpoint/Servers (EDR/XDR), email encryption, and endpoint encryption.
• Implement and monitor security best practices for Entra ID, Exchange Online/on-prem, SharePoint, and hybrid Active Directory.
• Manage, operate, and conduct configuration reviews of NDR, DLP, PAM, PAW, WAF, SASE, and database security tools.
• Secure and harden Microsoft and Oracle applications, and Windows/Linux operating systems.
• Strengthen network device configurations against CIS and NIA QCF 2022 and implement secure network architecture.
• Provide continuous cybersecurity advisory and risk assessment strategy support; assist with security product evaluation and service provider selection.
• Drive cybersecurity programs to close gaps identified by internal/external auditors, including NCSA; lead security solution implementation projects and manage vendors.
• Travel to datacenter and client locations as required; provide on-call incident support outside business hours as needed.

Qualifications

Experience Required

• 8-10 years of experience in cloud/cybersecurity engineering, operations, and advisory.
• Proven hands-on administration of Entra ID, Defender XDR, and email/endpoint encryption without vendor support.
• Hands-on experience with NDR, DLP, PAM, PAW, WAF, SASE, and database security tools.
• Experience hardening Microsoft/Oracle applications and Windows/Linux systems, including audit remediation (NCSA).
• Willingness and ability to travel to data center/client locations and provide on-call support as required.

Required Certifications

• Microsoft SC-300 (Identity and Access Administrator) – Entra ID/Entra Suite.
• Microsoft SC-200 (Security Operations Analyst) – Defender XDR (MDE/MDS).
• Microsoft SC-100 (Cybersecurity Architect Expert).
• Microsoft AZ-500 (Azure Security Engineer Associate).
• CISSP (Certified Information Systems Security Professional).
• NDR platform certification (e.g., Vectra, Darktrace, or ExtraHop Certified Administrator).
• DLP certification (e.g., Microsoft Purview DLP or Symantec/Broadcom DLP Administrator).
• PAM certification (e.g., CyberArk Defender/Sentry or BeyondTrust Certified Administrator) – covering PAM and PAW.
• WAF certification (e.g., F5 Certified BIG-IP Administrator, Imperva, or Cloudflare WAF).
• SASE certification (e.g., Zscaler ZDTA/ZIA or Palo Alto Prisma SASE).
• Database security certification (e.g., Oracle Database Security or Imperva Data Security).

Preferred Certifications

CISM, CCSP, CEH.

All certifications must be current. Equivalent recognized credentials may be considered subject to approval.

Primary Focus

• Administration of Entra ID, Defender XDR, and email/endpoint encryption without vendor support.
• Hands-on experience across NDR, DLP, PAM, PAW, WAF, SASE, and database security tooling.