The Senior Cybersecurity Consultant will join our Cybersecurity Practice as an Incident Handler within the security operations function. The role involves leading the detection, investigation, containment, and recovery of security incidents across enterprise and cloud environments, with a strong focus on the Microsoft security ecosystem.
Responsibilities will center on incident handling and response, threat detection and hunting, and the day-to-day operation of Microsoft security tooling, including Microsoft Defender (EDR/XDR), Microsoft Sentinel, Microsoft Purview, and Data Loss Prevention (DLP). The role will drive incidents through the full response lifecycle and continuously improve detection and response capabilities.
The consultant will work closely with SOC analysts, threat intelligence, and IT operations teams to triage alerts, lead investigations, coordinate containment and eradication, and conduct post-incident reviews. The role also involves tuning detections, developing response playbooks, and supporting proactive threat hunting across the Microsoft 365 and Azure estate.
The position requires deep, hands-on operational expertise in incident response and the Microsoft security stack, strong analytical and forensic capabilities, and the ability to remain calm and decisive under pressure during active security incidents.
- Locations
- Doha, Doha, Qatar