Senior Cybersecurity Consultant

Malomatia; Doha; On-site; QAR 300,000 - 420,000; Full time

Job summary

Malomatia in Doha, Qatar, seeks a Senior Cloud Security Engineer to design, implement, and operate enterprise security controls across hybrid IT environments. You will collaborate with cloud, network, endpoint, and application teams to strengthen IAM, data protection, and cloud security postures.

Responsibilities include risk assessment, secure configurations, incident response support, and governance alignment with CIS/NIST standards.

Qualifications

• Bachelor’s degree in Computer Science, Information Security, or a related field.
• At least 6 years of experience in cloud security, cloud infrastructure, or cybersecurity operations.
• Relevant professional certifications such as AZ-500, SC-300, AZ-104, Security+, CySA+, CC/SSCP, CSA.
• Hands-on experience with identity platforms, cloud-native security tools, EDR/XDR, network security, SIEM, encryption, and vulnerability management.

Responsibilities

• Security architecture assessment of enterprise IT and cloud environments; identify risks and propose controls.
• Implement and support IAM controls including RBAC, MFA, PAM, and identity governance.
• Assist in data protection measures: encryption, DLP, key management, data classification.
• Configure and monitor cloud security controls: IAM, network segmentation, workload protection, and logging.
• Support endpoint protection deployment and incident response activities.
• Maintain security tooling and monitoring platforms to improve visibility and threat detection.
• Document security configurations, risk assessments, and incident reports.

Skills

Cloud security

IAM

Data protection

Endpoint security

Network security

Security architecture

Risk assessment

Education

Bachelor’s degree in Computer Science or Information Security

Tools

Entra ID

Active Directory

EDR/XDR

SIEM

VPN

Encryption / Key management

Job description

Job Description
The

Job Description
The Senior Cloud Security Engineer will be part of the Cybersecurity Practice, working closely with cloud, infrastructure, network, endpoint, and application teams to design, implement, and maintain enterprise security controls that protect clients’ digital environments.
The role encompasses Identity and Access Management (IAM), Data Security, Cloud Security, Endpoint Security, and Network Security. Key responsibilities include implementing security best practices, monitoring security posture, identifying risks, and strengthening security architecture across hybrid IT environments.
The role also involves assessing security architectures, identifying vulnerabilities, implementing security solutions, and supporting incident response activities to ensure the confidentiality, integrity, and availability of systems and data. It requires hands‑on technical expertise, strong analytical capabilities, and the ability to translate security requirements into practical, scalable security solutions.

Responsibilities

• Enterprise Security Architecture and Risk Assessment:Support the assessment of enterprise IT and cloud environments to identify security risks and recommend appropriate controls across identity, data, network, endpoint, and cloud domains. Conduct security reviews of infrastructure, configurations, and deployments and provide actionable remediation recommendations aligned with industry best practices.
• Identity and Access Management (IAM):Implement and support secure identity and access controls, including role-based access control (RBAC), least privilege, multi-factor authentication (MFA), privileged access management (PAM), and identity governance practices across enterprise and cloud environments.
• Data Security:Assist in implementing data protection controls including data classification, encryption at rest and in transit, key management, data loss prevention (DLP), and secure data handling practices to ensure regulatory and organizational compliance.
• Cloud Security:Support secure configuration and monitoring of public, private, and hybrid cloud platforms. Implement security controls related to IAM, network segmentation, workload protection, encryption, logging, and compliance monitoring. Contribute to cloud security posture management and vulnerability remediation efforts.
• Endpoint Security:Support deployment and management of endpoint protection solutions including EDR/XDR platforms, antivirus, device control, patch management, and hardening baselines. Monitor endpoint security alerts and assist in incident investigation and response.
• Security Technology Stack:Support the implementation and management of security platforms and monitoring tools to strengthen security posture, improve visibility, and enhance threat detection across enterprise and cloud environments.
• Documentation and Reporting:Prepare and maintain documentation related to security configurations, risk assessments, incident reports, and operational procedures. Provide regular security posture updates to internal stakeholders and clients as required.
  

Qualifications

• Education: Bachelor’s / college degree in Computer Science, Information Security, or a related field.
• Experience: At least 6 years of experience in cloud security, cloud infrastructure, cybersecurity operations, or a closely related role.
• Certifications: Relevant professional certifications are highly desirable. These may include, but are not limited to:
• Microsoft Azure Security Engineer Associate (AZ-500)
• Microsoft Certified: Identity and Access Administrator Associate (SC-300)
• Microsoft Certified: Azure Administrator Associate (AZ-104)
• CompTIA Security+, CySA+, or similar
• ISC2 (e.g., CC or SSCP)
• CSA or other cloud security certifications.
• Technical Skills: Hands-on experience with security technologies including identity platforms (such as Entra ID and Active Directory), cloud-native security tools, endpoint protection solutions (EDR/XDR), network security technologies (firewalls, IDS/IPS, VPN), SIEM and log monitoring solutions, encryption and key management systems, and vulnerability management tools. Familiarity with integrating security controls across enterprise and cloud environments is preferred.
• Knowledge: Strong understanding of cybersecurity principles including defense-in-depth, zero trust, least privilege, segmentation, encryption, vulnerability management, and incident response. Familiarity with security frameworks and guidelines (e.g., CIS Benchmarks, NIST, ISO 27001) and general compliance/governance concepts. Knowledge of Qatar National Information Assurance (NIA) is a plus.