Senior Incident Lead - Microsoft Defender & SIEM

malomatia; Doha; On-site; QAR 300,000 - 540,000; Full time

Job summary

malomatia is seeking a Senior Cybersecurity Consultant to join its Cybersecurity Practice as an Incident Handler within the security operations function. You will lead detection, investigation, containment, and recovery of incidents focusing on the Microsoft security ecosystem.

The role requires hands-on expertise with Microsoft Defender (EDR/XDR), Defender for Office, Defender for Identity, Defender for Cloud Apps, and Microsoft Sentinel, Purview, and DLP across Microsoft 365 and Azure.

Qualifications

• Bachelor’s degree in Computer Science, Information Security, or related field.
• 8+ years in cybersecurity operations, incident response, or security monitoring with hands-on Microsoft security tools.

Responsibilities

• Lead end-to-end security incident handling across enterprise and cloud environments.
• Tune and operate Microsoft Defender, Defender for Identity and Defender for Cloud Apps for threat detection and response.
• Develop and tune analytic rules, KQL queries, runbooks, and SOAR playbooks to improve detection and response.
• Perform forensics and root cause analysis, document timelines and post-incident reviews.

Skills

Microsoft Defender

Microsoft Sentinel

Purview

DLP

KQL

PowerShell

incident response

forensics

Education

Bachelor’s degree in Computer Science or related field

Tools

Defender

Sentinel

Purview

EDR/XDR tooling

Job description

malomatia is seeking a Senior Cybersecurity Consultant to join its Cybersecurity Practice as an Incident Handler within the security operations function. You will lead detection, investigation, containment, and recovery of incidents focusing on the Microsoft security ecosystem.

The role requires hands-on expertise with Microsoft Defender (EDR/XDR), Defender for Office, Defender for Identity, Defender for Cloud Apps, and Microsoft Sentinel, Purview, and DLP across Microsoft 365 and Azure.