Senior Cloud Security Consultant

We are entrepreneurs in disruptive technology, at Devoteam, we deliver innovative technology consulting for business. Digital Transformakers, we are 7,000+ professionals across EMEA dedicated to ensuring our clients win their digital battle. We improve business performance making their companies truly digital. We advise our clients and build IT infrastructure for digital, making sure people are along for the ride.

Devoteam Middle East, we are the region's leading consulting firm delivering innovative Business & Technology Consulting & Solutions. Our 14 years of existence anchored in technologies that enables our clients business to flourish, accordingly our focus is to help our clients' win the digital battle, adapted to our clients’ business challenges, with a unique consideration to its impact on their systems and structures.

To know more about us, please visit: www.devoteam.com

We are seeking a highly motivated and experienced Security Cloud Consultant to join our team and play a key role in helping our clients achieve robust information security and compliance within their cloud environments. they will leverage their expertise in Governance, Risk & Compliance (GRC), and cloud security to assess client needs, develop and implement security controls, and guide them on their journey toward secure and compliant cloud adoption.

Responsibilities:

• Develop and implement effective GRC strategies and frameworks tailored to client needs and cloud platforms (e.g., AWS, Azure, GCP).
• Design and implement cloud security controls aligned with industry best practices (e.g., CIS Controls, NIST CSF) and relevant regulations (e.g., NCA, HIPAA, SAMA, NDMO).
• Design and implement security architectures for cloud deployments, using industry best practices and compliance frameworks.
• Configure and manage cloud security services, such as identity and access management (IAM), encryption, logging, and monitoring.
• Conduct security assessments and penetration testing of cloud environments to identify and mitigate vulnerabilities.
• Respond to security incidents and take appropriate action to contain and remediate them.
• Develop and implement security automation tools and scripts to improve efficiency and effectiveness.
• Stay up-to-date on the latest cloud security threats and trends and recommend mitigation strategies.
• Collaborate with other teams to ensure security is integrated throughout the development lifecycle.
• Provide training and awareness programs to client teams on cloud security best practices.
• Conduct comprehensive risk assessments and gap analyses to identify potential security vulnerabilities within client cloud environments.
• Assist clients in developing and maintaining cloud security policies, procedures, and documentation.
• Conduct internal audits and provide ongoing monitoring of security controls for effectiveness.
• Stay up-to-date on the latest cloud security threats, trends, and technologies.
• Collaborate with internal teams (e.g., sales, engineering) to ensure aligned and successful client engagements.
• Assist the sales team throughout the sales cycle, from initial contact to closing the deal.
• Prepare proposals, quotes, and presentations tailored to specific customer needs.
• Participate in customer meetings and negotiations.
• Stay up-to-date on industry trends and competitor offerings.

• Bachelor's degree in Computer Science, Information Security, or a related field.
• Minimum 7 years of experience with a Minimum of 4 years of experience in cloud security.
• Minimum of 4 years as a Consultant.
• Proven experience in designing and implementing security controls in cloud environments.
• Experience with security assessment and penetration testing tools and methodologies.
• Excellent communication, interpersonal, and problem-solving skills.
• Ability to work independently and as part of a team.
• Strong analytical and critical thinking skills.
• Experience with cloud-based security tooling (e.g., AWS Security Hub, Azure Sentinel, GCP Cloud Security Command Center).
• Knowledge of containerization technologies (e.g., Docker, Kubernetes).
• Cloud certifications (e.g., CSA-CCSK, CSA-CCAK, CCSP.