Senior Consultant, Azure Cloud Security

NVISO Security

. Assess cloud security posture against CIS, NIST, ISO 27001, and Microsoft benchmarks .

Posted 11/5/2026full-timeFrankfurt am Main • GermanySenior💰 €69,000 - €91,000 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in cloud security strategy and implementation, particularly within Azure and Microsoft 365 environments. Proficient in developing security policies, managing identity lifecycle, and utilizing Microsoft security services to enhance organizational security posture.

Highest-signal resume keywords

Microsoft Cloud Security ServicesAzure Security Best PracticesCloud Security FrameworksMicrosoft CertificationsScripting Languages

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Cloud Security AssessmentIdentity Lifecycle ManagementPrivileged Access ManagementKQL Threat-Hunting QueriesData Classification and DLPAzure PolicyTerraformMicrosoft DefenderMicrosoft SentinelMicrosoft Entra

Soft Skills

Strong Communication SkillsDocumentation SkillsReporting Skills

Tools & Technologies

AzureM365Microsoft PurviewMicrosoft TeamsMicrosoft Exchange OnlineMicrosoft SharePointMicrosoft OneDriveMicrosoft Defender for EndpointMicrosoft Defender for Cloud AppsMicrosoft Defender for Identity

Certifications & Qualifications

AZ-104SC-900SC-200SC-300SC-401SC-500SSCPCompTIA Security+

Industry Keywords

CIS BenchmarksNISTISO 27001Cloud Security PoliciesRisk-Based AccessContinuous TuningIncident ResponseCybersecurity ConsultingCloud Security SolutionsOn-Premises Identity Integration

Tech Stack

Tools & technologies

AzureCloudCyber SecurityPythonTerraformVault

About the role

Key responsibilities & impact

Assess cloud security posture against CIS, NIST, ISO 27001, and Microsoft benchmarks
Define cloud security strategy, target operating model, and roadmap
Develop and maintain cloud security policies, standards, and guardrails for Azure and M365
Design and implement Microsoft Entra tenant architecture, identity lifecycle, Conditional Access, MFA, risk-based access, and device compliance integrations
Deploy and operate Privileged Access Management, including PIM, just-in-time access, and break-glass accounts
Integrate and harden on-premises identities and federation
Build secure Azure landing zones using Azure Policy, Blueprints, Bicep, Terraform, and management groups
Enforce networking, compute, storage, encryption, Key Vault, workload isolation, tagging, resource locks, and managed identity controls
Deploy and tune Microsoft Defender products and Defender for Cloud Apps
Configure Microsoft Sentinel data connectors, analytics rules, UEBA, watchlists, workbooks, and SOAR playbooks
Develop detection use cases, KQL threat-hunting queries, and incident-response runbooks
Establish alert triage, escalation paths, and continuous tuning
Configure Microsoft Purview, Exchange Online, SharePoint, OneDrive, and Teams security controls
Design data classification, labeling, DLP, eDiscovery, legal hold, and audit configurations
Collaborate with security consultants, engineers, colleagues, and customers to understand requirements, assess security posture, and develop tailored cloud security solutions

Requirements

What you’ll need

Citizenship of a NATO member state or Austrian citizenship
At least 3 years of experience in information security specific to Azure or Microsoft 365 cloud environments
Proven expertise with Microsoft cloud security services, including Entra ID, Microsoft Sentinel, Microsoft Defender for Cloud, Defender for Endpoint, Defender for Cloud Apps, Defender for Identity, Intune, and/or Purview
Experience with cloud security best practices and frameworks such as CIS Benchmarks and Microsoft Cloud Security Benchmark
Strong communication, documentation, and reporting skills
Relevant current Microsoft cloud certifications, such as AZ-104, SC-900, SC-200, SC-300, SC-401, or SC-500
Experience in consulting
Other vendor-agnostic cybersecurity certifications, such as SSCP or CompTIA Security+, or equivalent
Experience with scripting languages such as PowerShell or Python
Bachelor's degree in Computer Science, Cyber Security, Information Security, Engineering, Information Technology, or related studies is preferred

Benefits

Comp & perks

Working with and learning from leading European cyber security professionals
Prestigious continuing education opportunities (GSE, GXPN, CISSP, OSCP, etc.)
Generous training budget of 10.000 EUR plus 10 man days for attending lectures, rolling over 2 years
Regular team-building and fun events
Personal coach within the team
Flexible working hours
Home office possibilities, including working abroad weeks within the EU
Business Bike Leasing
BahnCard 50 1st class plus public transfer ticket or EGYM WellPass
30 holidays
Company Pension Scheme
Cool offices in the center of Frankfurt and Munich, with BBQ, kicker table, and table tennis