18 hours ago
Doha, QatarMid Level
Responsibilities
- Assess public, private, and hybrid cloud architectures, services, configurations, and deployments for security risks.
- Design, implement, and maintain cloud security controls, policies, standards, baselines, and governance frameworks.
- Produce assessment reports with actionable remediation recommendations and maintain cloud security documentation.
- Implement cloud security monitoring to detect misconfigurations, vulnerabilities, suspicious activity, and threats.
- Analyze security alerts and events, investigate potential incidents, and support remediation.
- Review and support identity and access controls, including RBAC, least privilege, authentication, and authorization.
- Support continuous compliance monitoring against organizational policies, regulatory requirements, and security standards.
- Collaborate with DevOps and cloud engineering teams to integrate security controls into CI/CD pipelines and infrastructure-as-code workflows.
- Evaluate, implement, and manage CNAPP and native cloud security solutions for posture management, workload protection, identity security, and runtime threat detection.
- Prepare security reports and dashboards and provide secure-cloud guidance and knowledge-sharing sessions to technical teams.
Requirements
- Bachelor’s or college degree in Computer Science, Information Security, or a related field.
- At least 3 years of experience in cloud security, cloud infrastructure, cybersecurity operations, or a closely related role.
- Hands-on proficiency with Microsoft Defender for Cloud, Azure Policy, Entra ID, OCI Cloud Guard, IAM configuration, network security controls, encryption and key management, and cloud logging and monitoring.
- Experience with Azure Key Vault, OCI Vault, Azure Monitor, Log Analytics, and OCI Logging.
- Familiarity with infrastructure as code, including Terraform and ARM/Bicep, and integrating security checks into automation and deployment workflows.
- In-depth knowledge of cloud security principles, shared responsibility, identity governance, segmentation, hardening, vulnerability management, and incident response.
- Familiarity with CIS Benchmarks, NIST, ISO 27001, the CSA Cloud Controls Matrix, DevSecOps, and CI/CD pipelines.
- Relevant certifications are highly desirable, including Oracle Cloud Infrastructure Security Professional, Microsoft Azure Security Engineer Associate (AZ-500), AWS or GCP certifications, CSA or GIAC certifications, and CompTIA or ISC2 certifications.
- Qatar National Information Assurance knowledge is a plus.
- Strong hands-on technical, analytical, communication, and security solution design abilities.
Tech Stack
Categories
About Malomatia
Malomatia is a Doha-based IT services and systems integration firm that delivers consulting, managed services, contact center operations, and enterprise solutions in cybersecurity, cloud, and AI for government and regulated industries in Qatar. The company builds and operates mission-critical platforms, including Oracle and other cloud environments, and provides SLA-driven support. Founded in 2008, it focuses on national digital programs and large public-sector modernization initiatives.