Senior Cybersecurity Consultant

Role overview

Responsibilities

• Assess enterprise IT and cloud environments for risks and recommend controls across identity, data, network, endpoint, and cloud domains.
• Review infrastructure, configurations, and deployments and provide actionable remediation recommendations.
• Implement IAM controls including RBAC, least privilege, MFA, PAM, and identity governance.
• Support data classification, encryption at rest and in transit, key management, DLP, and secure data handling.
• Configure and monitor public, private, and hybrid cloud controls for IAM, segmentation, workload protection, encryption, logging, and compliance.
• Contribute to cloud security posture management and vulnerability remediation.
• Support EDR/XDR, antivirus, device control, patch management, and hardening baselines; monitor alerts and assist with incident response.
• Support security platforms and monitoring tools to improve visibility and threat detection.
• Maintain security configuration, risk assessment, incident, and operational documentation and provide posture updates to stakeholders and clients.

Education and experience

• Bachelor’s degree or college degree in Computer Science, Information Security, or a related field.
• At least 6 years of experience in cloud security, cloud infrastructure, cybersecurity operations, or a closely related role.

Technical qualifications

• Hands-on experience with Entra ID/Active Directory, cloud-native security tools, EDR/XDR, firewalls, IDS/IPS, VPN, SIEM/log monitoring, encryption/key management, and vulnerability management tools.
• Strong understanding of defense-in-depth, zero trust, least privilege, segmentation, encryption, vulnerability management, and incident response.
• Familiarity with CIS Benchmarks, NIST, ISO 27001, and compliance/governance concepts.
• Integration of security controls across enterprise and cloud environments is preferred.
• Knowledge of Qatar National Information Assurance (NIA) is a plus.

Desirable certifications

• Relevant professional certifications are highly desirable, including AZ-500, SC-300, AZ-104, Security+, CySA+, ISC2 credentials such as CC or SSCP, or CSA/cloud security certifications.