Senior Azure Cloud Security Consultant

NVISO Security

. Assess cloud security posture against CIS, NIST, ISO 27001, and Microsoft benchmarks .

Posted 11/5/2026full-timeMunich • GermanySenior💰 €69,000 - €91,000 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in cloud security posture assessment and strategy development, particularly within Azure and Microsoft 365 environments. Proficient in implementing security policies, managing identities, and deploying security solutions aligned with industry standards and regulatory requirements.

Highest-signal resume keywords

Microsoft Cloud Security ServicesAzure Security Best PracticesCloud Security FrameworksMicrosoft CertificationsScripting Languages

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Cloud Security AssessmentMicrosoft Entra IDMicrosoft SentinelMicrosoft Defender for CloudAzure PolicyKQL Threat-Hunting QueriesPrivileged Access ManagementEncryption ImplementationAzure Key Vault ConfigurationIncident-Response Runbooks

Soft Skills

Strong Communication SkillsDocumentation SkillsReporting Skills

Tools & Technologies

AzureMicrosoft 365PowerShellPythonMicrosoft PurviewMicrosoft Defender for EndpointDefender for Cloud AppsIntune

Certifications & Qualifications

AZ-104SC-900SC-200SC-300SC-401SC-500SSCPCompTIA Security+

Industry Keywords

CIS BenchmarksNISTISO 27001Cloud Security StrategyIdentity Lifecycle ManagementConditional AccessMFARisk-Based AccessData Loss PreventionEDiscovery

Tech Stack

Tools & technologies

AzureCloudCyber SecurityPythonTerraformVault

About the role

Key responsibilities & impact

Assess cloud security posture against CIS, NIST, ISO 27001, and Microsoft benchmarks
Define cloud security strategy, target operating model, and roadmap aligned with business and regulatory requirements
Develop and maintain cloud security policies, standards, and guardrails for Azure and Microsoft 365
Design and implement Microsoft Entra tenant architecture, identity lifecycle, Conditional Access, MFA, risk-based access, and device compliance integrations
Deploy and operate Privileged Access Management, including PIM, just-in-time access, and break-glass accounts
Integrate on-premises identities with secure synchronization and federation hardening
Build secure Azure landing zones using Azure Policy, Blueprints/Bicep/Terraform, and management groups
Enforce baseline controls for networking, compute, and storage
Configure Azure Key Vault for secrets, keys, and certificate management
Implement encryption, workload isolation, tagging, resource locks, and managed identities
Deploy and tune Microsoft Defender solutions and Microsoft Sentinel
Configure Sentinel data connectors, analytics rules, UEBA, watchlists, workbooks, and SOAR playbooks
Develop detection use cases, KQL threat-hunting queries, and incident-response runbooks
Establish alert triage, escalation paths, and continuous tuning
Configure Microsoft Purview, Microsoft 365 security baselines, DLP, information protection, eDiscovery, legal hold, and audit settings as applicable

Requirements

What you’ll need

Citizenship of a NATO member state or Austrian citizenship
At least 3 years of information security experience specific to Azure or Microsoft 365 cloud environments
Proven expertise with Microsoft cloud security services, including Entra ID, Microsoft Sentinel, Microsoft Defender for Cloud, Defender for Endpoint, Defender for Cloud Apps, Defender for Identity, Intune, and/or Purview
Experience with cloud security best practices and frameworks such as CIS Benchmarks and Microsoft Cloud Security Benchmark
Strong communication, documentation, and reporting skills
Relevant current Microsoft cloud certifications, such as AZ-104, SC-900, SC-200, SC-300, SC-401, or SC-500
Experience in consulting
Other vendor-agnostic cybersecurity certifications, such as SSCP or CompTIA Security+, or equivalent
Experience with scripting languages such as PowerShell or Python
Bachelor’s degree in Computer Science, Cyber Security, Information Security, Engineering, Information Technology, or related studies is preferred

Benefits

Comp & perks

Working with and learning from leading European cyber security professionals
Access to SANS Instructors and representation at BlackHat, BruCON, OWASP, and other hacking conferences
Prestigious continuing education opportunities, including GSE, GXPN, CISSP, OSCP, etc.
Training budget of 10,000 EUR plus 10 man days for attending lectures, rolling over 2 years
Regular team-building and fun events
Personal coach within the team for well-being and career growth
Flexible working hours
Home office possibilities, including working abroad weeks within the EU
Business Bike Leasing
BahnCard 50 1st class plus public transfer ticket or EGYM WellPass
30 holidays
Company Pension Scheme
Cool offices with BBQ, kicker table, table tennis, etc.