Senior Consultant - Cybersecurity
Key Skills for This Role
Full Job Posting
Qualifications
- Education: Bachelor’s / college degree in Computer Science, Information Security, or a related field.
- Experience: At least 8 years of experience in cybersecurity operations, incident response, or security monitoring, with significant hands-on experience operating Microsoft security tools.
- Certifications: Relevant professional certifications are highly desirable. These may include, but are not limited to:
- Microsoft Security Operations Analyst (SC-200)
- Microsoft Certified: Cybersecurity Architect (SC-100) or Information Protection (SC-400)
- GIAC incident response / forensics (e.g., GCIH, GCFA) or equivalent
- ISC2 (e.g., SSCP or CISSP) or CompTIA CySA+.
- Technical Skills: Strong hands-on experience with the Microsoft security stack, including Microsoft Defender (EDR/XDR), Microsoft Sentinel, Microsoft Purview, and Microsoft 365 DLP. Proficiency with KQL for investigation and detection. Experience with EDR investigation, log analysis, SIEM/SOAR, endpoint and cloud forensics, and identity platforms (Entra ID and Active Directory). Familiarity with scripting (e.g., PowerShell) for automation is preferred.
- Knowledge: Strong understanding of incident response methodologies and frameworks (e.g., NIST SP 800-61, SANS), the MITRE ATT&CK framework, the cyber kill chain, and modern attacker techniques. Solid grasp of cybersecurity principles including defense-in-depth, zero trust, and least privilege. Familiarity with ISO 27001 and CIS Benchmarks. Knowledge of Qatar National Information Assurance (NIA) is a plus.
- Certifications: Relevant professional certifications are highly desirable. These may include, but are not limited to: Microsoft Security Operations Analyst (SC-200) Microsoft Certified: Cybersecurity Architect (SC-100) or Information Protection (SC-400) GIAC incident response / forensics (e.g., GCIH, GCFA) or equivalent ISC2 (e.g., SSCP or CISSP) or CompTIA CySA+.
Responsibilities
- Incident Handling & Response: Lead the end-to-end handling of security incidents, including detection, triage, investigation, containment, eradication, and recovery, in line with established incident response processes and SLAs.
- Microsoft Defender (EDR/XDR): Operate, tune, and investigate using Microsoft Defender for Endpoint, Defender for Office 365, Defender for Identity, and Defender for Cloud Apps to detect and respond to threats across endpoints, identities, email, and cloud workloads.
- Microsoft Sentinel (SIEM/SOAR): Use Microsoft Sentinel for log analysis, correlation, and automated response. Develop and tune analytic rules, KQL queries, workbooks, and SOAR playbooks to improve detection coverage and response efficiency.
- Microsoft Purview & Data Security: Leverage Microsoft Purview for data governance, information protection, insider risk management, and compliance. Investigate data-related alerts and support data security and DLP operations.
- Data Loss Prevention (DLP): Configure, monitor, and respond to DLP policies across Microsoft 365 and endpoints to detect and prevent unauthorized data exfiltration, and refine policies to reduce false positives.
- Threat Hunting & Detection Engineering: Conduct proactive threat hunting across the Microsoft 365 and Azure estate, develop new detections, and continuously improve detection logic based on threat intelligence and lessons learned.
- Forensics & Root Cause Analysis: Perform host, endpoint, and cloud-based investigations and digital forensics to determine root cause, scope, and impact of incidents, preserving evidence in line with best practices.
- Documentation & Reporting: Produce high-quality incident reports, timelines, and post-incident reviews. Maintain runbooks and playbooks, and provide clear incident updates to internal stakeholders and clients.
About malomatia
Qatar-based technology services provider driving digital transformation and innovation.
Visit company websiteJobs and hiring trendsApply for this job in 1 click
Skip the repetitive application forms
Install the Base Career Chrome Extension and autofill job applications across major job boards with your profile.
Trusted by over 500,000 job seekers on Base Career
More from this employer
More jobs at malomatia
Consultant -Data Portal
, QAT
The employer is seeking an experienced full-stack web developer to build and maintain a data dissemination portal. The work spans React front-end development, API and semantic-layer integration, architecture, and collabo
AI Security SME
, QAT
The employer seeks an AI Security SME to lead security architecture, governance, and assurance for ML, LLM, and agentic platforms. Candidates need extensive cybersecurity and AI/ML security experience, hands-on cloud and
Executive Assistant
, QAT
The employer is seeking an experienced Executive Assistant to provide strategic and administrative support to the Chief of SBU. The role manages communications, meetings, records, expenses, and follow-up on key deliverab
Engineer – System
, QAT
The employer is seeking a Senior Systems Engineer with 8+ years of experience to administer Linux and Windows systems and enterprise infrastructure in a 24/7 SOC Fusion Center environment. The role covers virtualization,
Engineer - Information Security Operations
, QAT
The employer is seeking an Information Security Operations Engineer to monitor security alerts, investigate incidents, and improve detection and response. The role includes managing security tools, applying threat intell
Consultant -Data Portal
, QAT
AI Security SME
, QAT
Executive Assistant
Doha, QAT
Executive Assistant
, QAT
Engineer – System
, QAT
Engineer - Information Security Operations
, QAT
Engineer – System
Doha, QAT
Consultant – Assurance & Validation, GPU Infrastructure
, QAT