16 hours ago
Cairo, EgyptMid Level / Senior
Responsibilities
- Design cloud security architectures and secure landing zones across Azure, AWS, and multi-cloud environments.
- Engineer Microsoft Defender XDR and Sentinel detections, automation rules, SOAR playbooks, and data-ingestion architecture.
- Implement Microsoft Purview DLP, DSPM, Information Protection, and insider-risk capabilities.
- Lead Kubernetes and container security hardening, including admission control, image scanning, runtime protection, and network policy.
- Run risk-based vulnerability management across cloud and on-premises infrastructure, including exception handling and executive reporting.
- Assess and harden hybrid infrastructure through OS baselines, network segmentation, firewall/WAF configuration, and EDR coverage.
- Design identity-centric controls using Entra ID Conditional Access, PIM, workload identities, and least-privilege models.
- Lead client workshops and architecture reviews, create posture-improvement roadmaps, own technical workstreams, quality-assure deliverables, and coach junior team members.
Requirements
- Typically 3–6 years of relevant experience in cloud security, infrastructure security, security engineering, or related technology areas.
- Experience with Azure Security, AWS Security, infrastructure security, network security, encryption, and secure landing-zone design.
- Experience deploying, tuning, and remediating CSPM, CWPP, or CNAPP platforms such as Microsoft Defender for Cloud, Wiz, and Prisma Cloud.
- Experience with Microsoft Defender XDR, Microsoft Sentinel, Microsoft Intune, Entra ID, detection engineering, KQL, automation, and device or identity controls.
- Experience with Microsoft Purview, Cyera, or Varonis for DSPM, DLP, data classification, and Information Protection.
- Experience securing Kubernetes and containers, including AKS/EKS hardening, admission controllers, image supply chains, and runtime threat detection.
- Experience with infrastructure and vulnerability management, network security, firewalls, server or OS hardening, and risk-based prioritization.
- Automation and infrastructure-as-code skills using Terraform, Bicep, PowerShell, or Python.
- Ability to lead client-facing technical discussions and translate findings into prioritized, costed remediation plans.
- Relevant certifications include SC-500, SC-200, AWS Certified Security – Specialty, CCSK, CCSP, CKS, CCNP Security, or CySA+.
Benefits
- Work visa sponsorship is available.
- Travel requirements are not specified.
About PwC
PwC is a global network of professional services firms providing assurance, tax, and advisory work for businesses and public-sector clients. It sells project-based and managed consulting, audit, and deals services, and implements and integrates business applications. Formed in 1998 by the merger of Price Waterhouse and Coopers & Lybrand, it is headquartered in London and is one of the Big Four accounting firms.