Senior Cybersecurity Consultant (Cloud & Microsoft Security)

As a Lead Cloud Security Consultant, you will deliver cybersecurity advisory, assessment, implementation, and optimization projects across cloud and hybrid environments. Working closely with clients from multiple industries, you will help strengthen their cybersecurity posture through the implementation of modern security controls, cloud security solutions, threat detection capabilities, and governance frameworks.

This role combines hands-on technical expertise, client engagement, security consulting, and the continuous development of cloud security best practices, with a particular focus on the Microsoft Security ecosystem.

Key Responsibilities

- Deliver end-to-end cloud security projects across Microsoft security technologies, including Microsoft Sentinel, Defender XDR, Defender for Cloud, and Entra ID.

- Assess and improve cybersecurity controls across Azure, AWS, GCP, and hybrid infrastructures.

- Design and implement cloud security architectures, governance models, and security hardening initiatives.

- Develop and optimize threat detection use cases, analytics rules, hunting queries, and incident response workflows.

- Configure and maintain SIEM, XDR, vulnerability management, and cloud security monitoring solutions.

- Conduct cybersecurity assessments, technical audits, vulnerability reviews, and cloud security posture evaluations.

- Support cybersecurity risk management activities and remediation planning.

- Develop security roadmaps, remediation plans, technical reports, and executive presentations.

- Lead client workshops and provide strategic guidance on cloud security, identity protection, and cyber resilience.

- Contribute to the development of reusable consulting assets, methodologies, playbooks, and security frameworks.

- Support security incident investigations and response activities when required.

- Deliver cybersecurity awareness and knowledge-sharing sessions to internal and client teams.

What We're Looking For

- Bachelor's degree in Computer Science, Cybersecurity, Information Technology, or related field.

- 5+ years of experience in Cybersecurity, Cloud Security, Security Consulting, SOC, or Security Engineering roles.

- Hands-on experience with Microsoft Sentinel, Defender XDR, Defender for Cloud, and Entra ID.

- Strong knowledge of KQL, alert tuning, detection engineering, and threat hunting.

- Experience delivering cloud security assessments and remediation programs.

- Solid understanding of IAM, Conditional Access, MFA, RBAC, PIM, and Zero Trust principles.

- Experience with Azure security services and cloud-native security controls.

- Knowledge of AWS and/or Google Cloud security concepts.

- Experience with vulnerability management, incident response, security monitoring, and security operations.

- Strong understanding of security frameworks such as ISO 27001, NIST, CIS Controls, or MITRE ATT&CK.

- Excellent communication skills and proven client-facing experience.

- Fluency in Portuguese and English.

Nice to Have

- Microsoft Purview.

- Wiz or other CNAPP solutions.

- DevSecOps and Infrastructure-as-Code security experience.

- Python, PowerShell, or Bash scripting.

- SC-100, SC-200, AZ-500, CISSP, CCSP, CISM, or similar certifications.