Consultant - Cybersecurity

Job Description

We are looking for a Cybersecurity professional to support the organisation's internal cybersecurity across cloud, on-premise infrastructure, identity, networking, application/API security, cryptography, secrets management, vulnerability management, and DevSecOps.

The role will work closely with Infrastructure, Cloud, Network, DevOps, and IT teams to identify security weaknesses, implement security controls, improve security configurations, and support remediation activities.

Responsibilities

• Support the definition of mitigation strategies and security improvements.
• Security Engineering: Support implementation, configuration, and improvement of cybersecurity controls across on-premise and cloud environments.
• Identity Security: Support Microsoft Entra ID and Active Directory, including MFA, Conditional Access, privileged access, and access reviews.
• Cloud Security: Support security assessments and hardening across Microsoft Azure and GCP, including identity, network security, logging, encryption, and secure configuration.
• Network Security: Support network segmentation, access controls, VPNs, and firewall security, including FortiGate.
• Vulnerability Management: Perform vulnerability scanning, analyse findings, prioritise risks, coordinate remediation, and validate fixes.
• Cryptography & Secrets Management: Support secure management of cryptographic keys, certificates, encryption, secrets, and credentials using platforms such as HashiCorp Vault, Azure Key Vault, and GCP Secret Manager.
• API Security: Support security assessments and controls for APIs, including authentication, authorisation, encryption, access controls, API gateways, and common API vulnerabilities.
• DevSecOps: Integrate security into CI/CD processes, including SAST, dependency scanning, secrets detection, container security, and IaC security.
• Terraform / IaC Security: Review and improve security controls within Terraform and infrastructure-as-code environments.
• Incident Response: Support security investigations, incident response, remediation, and lessons learned.
• Security Policies & Standards: Support development and implementation of cybersecurity policies, technical standards, hardening baselines, and security procedures.
• Security Assessments: Provide cybersecurity input into technology projects, architecture reviews, risk assessments, and audits.
• Automation & Continuous Improvement: Identify opportunities to automate security processes and continuously improve the organisation's security posture.
  
  

Qualifications

Qualifications & Experience -

• Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or a related field, or equivalent practical experience.
• 2-4 years of experience in cybersecurity, security engineering, cloud security, infrastructure security, or related technical roles.
• Practical understanding of cybersecurity, networking, identity and access management, cloud security, infrastructure security, cryptography, secrets management, and API security.
• Hands-on experience with several of the technologies listed below, with the ability and willingness to develop expertise across the broader technology environment.
• Strong analytical, problem-solving, and troubleshooting skills.
• Strong verbal and written English communication skills.
  
  

Technical Environment -

Experience Or Exposure To

• Microsoft Entra ID & Active Directory
• Microsoft Azure & Google Cloud Platform (GCP)
• HashiCorp Vault
• Azure Key Vault, GCP Secret Manager, or equivalent secrets management solutions
• Cryptography, PKI, certificates, encryption, and key management
• API security and API gateways
• Windows and Linux infrastructure
• Networking and network segmentation
• FortiGate or similar enterprise firewall technologies
• Vulnerability scanning and vulnerability management tools
• Terraform and Infrastructure as Code (IaC)
• DevSecOps and CI/CD security practices
• Security monitoring, incident response, and threat remediation
• Python, PowerShell, Bash, or similar scripting languages
  
  

Certifications (Desirable) =

• CompTIA Security+ and/or CySA+
• Microsoft or Google Cloud Security Certifications
• Fortinet Certifications
• HashiCorp and/or Terraform Certifications
• Certified Cloud Security Professional (CCSP) and/or Certified Information Systems Security Professional (CISSP)
• GIAC Certifications
  
  

About Malomatia

ABOUT US

malomatia is a leading Qatar-based IT services and solutions provider, bringing together top Qatari and international talent to deliver innovative, end-to-end technology solutions that empower clients to achieve their strategic goals.

Our mission

Empowering Qatar's businesses and governments to leap into the digital future with agile, knowledge-driven solutions.

Our vision

To become Qatar's trusted knowledge partner in digital transformation, disrupting industries, shaping the future, and building a world-class tech ecosystem.

Driving change that makes a real impact

Since 2008, malomatia has been driving Qatar's digital transformation through innovative, ISO-certified IT solutions. With expertise across key public and private sectors, we empower the nation's vision with advanced services in cloud, cybersecurity, AI, and contact center excellence, elevating the role of technology in shaping Qatar's sustainable future.

About The Team

Established in 2008, malomatia is a Qatari leader in IT services and digital transformation. We serve key sectors including Government, Healthcare, Education, Customs, and Transportation, delivering impactful solutions that support national development goals. Powered by a diverse team of skilled Qatari and international IT professionals, we deliver innovative, high-value digital solutions tailored to the unique needs of our clients.

Our mission is to inspire customers to thrive through digital excellence, and we envision becoming the trusted partner of choice in building a smarter society through technology and talent. We are driven by core values that define our culture and approach: ownership, integrity, empathy, teamwork, transparency, agility, excellence, trust, and innovation.

Join us in shaping the future of technology in Qatar