Cloud Security Specialist

About the role

The Cloud Security Specialist will protect our clients' cloud environments by monitoring security alerts, managing identity risks, and ensuring compliance with industry standards. You will work with Microsoft security tools and collaborate with cross‑functional teams to maintain a strong security posture across Azure and Microsoft 365 workloads.

Key responsibilities

• Monitor cloud security alerts, posture regressions, risky identities, policy failures, connector health and workload protection status.
• Operate Microsoft Defender for Cloud, Defender XDR, Microsoft Sentinel and related capabilities.
• Review Secure Score and CSPM/CNAPP findings, validate severity and assign remediation ownership.
• Triage cloud incidents, coordinate containment actions such as session revocation, Conditional Access, secret rotation or workload isolation.
• Track misconfigurations, vulnerabilities, exposed services, weak encryption and excessive permissions to closure.
• Support onboarding of subscriptions, workloads and cloud connectors, ensuring telemetry completeness and policy assignment.
• Review service principals, managed identities, privileged roles and access anomalies; escalate high‑risk identity findings.
• Integrate cloud alerts with SIEM/SOAR and ITSM workflows, maintaining complete incident records.
• Perform security configuration checks against CIS, Azure benchmarks, UAE IA and ADHICS and produce operational dashboards and reports.
• Assist with cloud security architecture reviews, landing‑zone validation and DevSecOps security checks.

Required profile

• 5+ years of security operations, cloud operations or infrastructure security experience, including at least 2 years focused on Azure/Microsoft 365 security.
• Bachelor’s degree in Computer Science, Cybersecurity, Information Technology or a related field (post‑graduate qualification is a plus).
• Relevant certifications such as AZ‑500, SC‑200, SC‑100, CCSP, Security+ or ITIL Foundation.

Required skills

• Microsoft Defender for Cloud, Defender XDR and Microsoft Sentinel.
• Azure and Microsoft 365 security posture management (Secure Score, CSPM, CNAPP).
• SIEM and SOAR integration with incident handling.
• Kubernetes and container security monitoring.
• Compliance frameworks: CIS benchmarks, Azure benchmarks, UAE IA, ADHICS.