Cloud Security Engineer

Role overview

Responsibilities

• Assess cloud architectures and environments, identify risks, design controls, and provide actionable remediation reports.
• Review cloud services and deployments across compute, storage, networking, identity, and platform services.
• Define and maintain cloud security policies, standards, baselines, control frameworks, RACI models, and operating procedures.
• Implement cloud security monitoring, investigate alerts and potential incidents, and support remediation.
• Review identity and access controls, including role-based access, least privilege, authentication, and authorization.
• Monitor compliance and remediate configuration gaps and policy violations.
• Integrate security into CI/CD pipelines and infrastructure-as-code workflows; promote automation.
• Evaluate and manage CNAPP solutions, including Prisma Cloud and native tools such as Microsoft Defender, for posture, workload, identity, and runtime threat protection.
• Maintain security documentation and prepare reports and dashboards for internal stakeholders and clients.
• Provide secure-cloud guidance and knowledge-sharing to cloud, infrastructure, and development teams.

Qualifications

• Bachelor’s or college degree in Computer Science, Information Security, or a related field.
• At least 3 years of experience in cloud security, cloud infrastructure, cybersecurity operations, or a closely related role.
• Proficiency with Microsoft Defender for Cloud, Azure Policy, Entra ID, and OCI Cloud Guard.
• Hands-on IAM, network security controls, encryption and key management, and logging and monitoring experience.
• Knowledge of cloud shared responsibility, identity governance, segmentation, hardening, vulnerability management, and incident response.
• Familiarity with CIS Benchmarks, NIST, ISO 27001, CSA Cloud Controls Matrix, and security governance.
• Infrastructure as Code tools such as Terraform or ARM/Bicep and security checks in automation workflows are preferred.

Certifications and additional knowledge

• Relevant professional certifications are highly desirable, including OCI Security Professional and Microsoft Azure Security Engineer Associate (AZ-500).
• Other desirable certification areas include AWS or GCP, CSA or GIAC, and CompTIA or ISC2.
• Qatar National Information Assurance knowledge is a plus.

About Malomatia