Lead Cloud Security Consultant – Microsoft Focus

About the role

We are building a new Cloud Security Practice that delivers outcome‑driven security engagements across Microsoft Azure, Microsoft 365, Google Cloud, AWS and CNAPP platforms. As a Lead Cloud Security Consultant with a Microsoft focus you will design, execute and create reusable assets that enable the practice to scale.

Key responsibilities

• Deliver end‑to‑end Microsoft‑focused cloud security engagements, including Sentinel deployments, Defender XDR rollouts, Defender for Cloud implementations and threat‑hunting activities.
• Write KQL queries, tune analytics rules, build data connectors and configure Defender XDR policies while guiding customers through telemetry and risk insights.
• Assess and improve security controls across Sentinel, Defender XDR, Defender for Cloud, Entra ID, Azure workloads, logging/monitoring and privileged access.
• Support multi‑cloud engagements (Google Cloud, AWS) and CNAPP‑related work for posture improvement and exposure reduction.
• Run customer‑facing workshops and develop reusable assets such as playbooks, templates, KQL libraries, detection rule packs and remediation roadmaps.

Required profile

• 5+ years of cybersecurity experience with a strong focus on the Microsoft security stack.
• Hands‑on experience deploying Microsoft Sentinel in production for enterprise customers and writing KQL from scratch.
• Proven ability to configure and operate Microsoft Defender XDR across endpoint, identity, Office 365 and cloud apps.
• Solid understanding of Azure security, Azure Policy, RBAC, logging/monitoring and cloud hardening.
• Fluent in Portuguese and English with strong client‑facing communication skills.

Required skills

• Microsoft Sentinel
• KQL (Kusto Query Language)
• Microsoft Defender XDR (Endpoint, Identity, Office 365, Cloud Apps)
• Azure Policy and RBAC
• Microsoft Entra ID (MFA, Conditional Access, Identity Protection)
• Logic Apps / Automation rules
• Infrastructure‑as‑Code tools: Terraform, Bicep, ARM templates
• Familiarity with CNAPP platforms (e.g., Wiz)