Consultant - Cybersecurity
About this role
We are looking for a Cybersecurity professional to support the organisation’s internal cybersecurity across cloud, on-premise infrastructure, identity, networking, application/API security, cryptography, secrets management, vulnerability management, and DevSecOps.
The role will work closely with Infrastructure, Cloud, Network, DevOps, and IT teams to identify security weaknesses, implement security controls, improve security configurations, and support remediation activities.
• Support the definition of mitigation strategies and security improvements.
• Security Engineering: Support implementation, configuration, and improvement of cybersecurity controls across on-premise and cloud environments.
• Identity Security: Support Microsoft Entra ID and Active Directory, including MFA, Conditional Access, privileged access, and access reviews.
• Cloud Security: Support security assessments and hardening across Microsoft Azure and GCP, including identity, network security, logging, encryption, and secure configuration.
• Network Security: Support network segmentation, access controls, VPNs, and firewall security, including FortiGate.
• Vulnerability Management: Perform vulnerability scanning, analyse findings, prioritise risks, coordinate remediation, and validate fixes.
• Cryptography & Secrets Management: Support secure management of cryptographic keys, certificates, encryption, secrets, and credentials using platforms such as HashiCorp Vault, Azure Key Vault, and GCP Secret Manager.
• API Security: Support security assessments and controls for APIs, including authentication, authorisation, encryption, access controls, API gateways, and common API vulnerabilities.
• DevSecOps: Integrate security into CI/CD processes, including SAST, dependency scanning, secrets detection, container security, and IaC security.
• Terraform / IaC Security: Review and improve security controls within Terraform and infrastructure-as-code environments.
• Incident Response: Support security investigations, incident response, remediation, and lessons learned.
• Security Policies & Standards: Support development and implementation of cybersecurity policies, technical standards, hardening baselines, and security procedures.
• Security Assessments: Provide cybersecurity input into technology projects, architecture reviews, risk assessments, and audits.
• Automation & Continuous Improvement: Identify opportunities to automate security processes and continuously improve the organisation’s security posture.
Qualifications & Experience -
• Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, or a related field, or equivalent practical experience.
• 2-4 years of experience in cybersecurity, security engineering, cloud security, infrastructure security, or related technical roles.
• Practical understanding of cybersecurity, networking, identity and access management, cloud security, infrastructure security, cryptography, secrets management, and API security.
• Hands-on experience with several of the technologies listed below, with the ability and willingness to develop expertise across the broader technology environment.
• Strong analytical, problem-solving, and troubleshooting skills.
• Strong verbal and written English communication skills.
Technical Environment -
Experience or exposure to:
• Microsoft Entra ID & Active Directory
• Microsoft Azure & Google Cloud Platform (GCP)
• HashiCorp Vault
• Azure Key Vault, GCP Secret Manager, or equivalent secrets management solutions
• Cryptography, PKI, certificates, encryption, and key management
• API security and API gateways
• Windows and Linux infrastructure
• Networking and network segmentation
• FortiGate or similar enterprise firewall technologies
• Vulnerability scanning and vulnerability management tools
• Terraform and Infrastructure as Code (IaC)
• DevSecOps and CI/CD security practices
• Security monitoring, incident response, and threat remediation
• Python, PowerShell, Bash, or similar scripting languages
Certifications (Desirable) =
• CompTIA Security+ and/or CySA+
• Microsoft or Google Cloud Security Certifications
• Fortinet Certifications
• HashiCorp and/or Terraform Certifications
• Certified Cloud Security Professional (CCSP) and/or Certified Information Systems Security Professional (CISSP)
• GIAC Certifications
About Malomatia
malomatia is a leading Qatar-based IT services and solutions provider, bringing together top Qatari and international talent to deliver innovative, end-to-end technology solutions that empower clients to achieve their strategic goals.
Our mission
Empowering Qatar’s businesses and governments to leap into the digital future with agile, knowledge-driven solutions.
Our vision
To become Qatar’s trusted knowledge partner in digital transformation, disrupting industries, shaping the future, and building a world-class tech ecosystem.
Driving change that makes a real impact
Since 2008, malomatia has been driving Qatar’s digital transformation through innovative, ISO-certified IT solutions. With expertise across key public and private sectors, we empower the nation’s vision with advanced services in cloud, cybersecurity, AI, and contact center excellence, elevating the role of technology in shaping Qatar’s sustainable future.
Frequently Asked Questions
Is the salary disclosed for the Consultant - Cybersecurity position at Malomatia?
Where is the Consultant - Cybersecurity position at Malomatia located?
Is the Consultant - Cybersecurity role at Malomatia full-time or part-time?
How do I apply for the Consultant - Cybersecurity position at Malomatia?
When was the Consultant - Cybersecurity job at Malomatia posted?
You'll be redirected to Malomatia's official application page on oraclecloud.