{"id":525863,"title":"Azure Cloud Security Senior Consultant (m/w/d)","company":"NVISO GmbH","city":"Germany","region":null,"location":"Germany","work_model":"hybrid","employment_type":"full_time","employment":["full_time"],"roles":["devops","security","consulting"],"visa":"not_mentioned","relocation":"not_mentioned","posted_at":"2026-11-05T23:00:00+00:00","tools":["Azure","Active Directory","Microsoft Sentinel","PowerShell","Python","OWASP","Agile","ISO 27001"],"seniority":"senior","years_experience_min":3,"german_requirement":"not_mentioned","german_level":"unspecified","english_requirement":"required","english_level":"unspecified","team_language":"unknown","confidence":0.4,"method":"rules","language_badge":"English ad, no German stated","badge_key":"english_ad","language_evidence":null,"requirements_snippet":"You hold a citizenship of a NATO member state or the Austrian citizenship; At least 3 years of experience in information security specific to Azure or Microsoft 365 cloud environments. Proven expertise with Microsoft’s cloud …","url":"https://homeofjobs.de/jobs/azure-cloud-security-senior-consultant-m-w-d-germany-20373","source":"careersite","agency":null,"description_text":"Who are we?\n\nIt all starts with the mission: NVISO is here to protect European society from potentially devastating cyber attacks! This means we offer cyber security services to private and governmental organizations to help them better prepare for, prevent, detect and respond to cyber security incidents.\n\nAll of this is built on four fundamental values that define who we are: We are Proud, We Break Barriers, We Care and No BS!\n\nWhat will you do?\n\nYou will be joining NVISO’s Cloud Security team as an Azure Cloud Security Senior Consultant (m/w/d). The ideal candidate has knowledge in Azure cloud services, with a particular focus on security.\n\nAs part of a team of security consultants and engineers, you will collaborate closely with other colleagues and our customers to understand their business and security requirements, assess their current security posture, and develop tailored cloud security solutions for them.\n\nResponsibilities\n\nWe are aware that cloud security features and products are abundant; the following list apply to the ones of interest to us. If you have experience or feel capable of conducting only some of them (not the full list), please reach out!\n\nStrategy and Governance\n\nAssess cloud security posture against frameworks (e.g., CIS, NIST, ISO 27001) and Microsoft benchmarks (Azure Security Benchmark, M365 baseline).\n\nDefine cloud security strategy, target operating model, and roadmap aligned to business and regulatory requirements.\n\nDevelop and maintain cloud security policies, standards, and guardrails for Azure and M365.\n\nIdentity and Access Management (IAM)\n\nDesign and implement Microsoft Entra tenant architecture, including identity lifecycle, conditional access, and MFA.\n\nImplement and tune Conditional Access policies, risk-based access, and device compliance integrations with Intune/Endpoint Manager.\n\nDeploy and operate Privileged Access Management (PAM), including PIM for Azure and M365 roles, just-in-time access, and break-glass accounts.\n\nIntegrate on-premises identities (hybrid) with secure synchronization and hardening of federation where used.\n\nPlatform Security and Hardening (Azure)\n\nBuild secure landing zones using Azure Policy, Blueprints/Bicep/Terraform, and management groups.\n\nEnforce baseline controls for networking (NSGs, Azure Firewall, Private Link), compute (secure images, patching), and storage (encryption, private endpoints).\n\nConfigure Azure Key Vault for secrets, keys, and certificates management with RBAC and purge protection.\n\nEnsure encryption at rest and in transit, customer-managed keys (CMK), and double encryption where required.\n\nImplement workload isolation, tagging, and resource locks; manage identity-based access (managed identities).\n\nThreat Protection and Monitoring\n\nDeploy and tune Microsoft Defender for Cloud, Defender for Cloud Apps (MCAS), Defender for Endpoint, and Defender for Identity.\n\nConfigure Microsoft Sentinel: data connectors, analytics rules, UEBA, watchlists, workbooks, and SOAR playbooks (Logic Apps).\n\nDevelop detection use cases, threat hunting queries (KQL), and incident response runbooks specific to Azure and M365 threats.\n\nEstablish alert triage, escalation paths, and continuous tuning to reduce noise and improve mean time to detect/respond.\n\nMicrosoft 365 Security – (Nice to have)\n\nConfigure and manage Microsoft Purview (Compliance portal) for DLP, information protection labels, data lifecycle, and insider risk.\n\nImplement Exchange Online, SharePoint, OneDrive, and Teams security baselines, safe links/attachments, and anti-phishing policies.\n\nEnforce device compliance via Intune, app protection policies, and conditional access for BYOD and corporate devices.\n\nSecure collaboration and external sharing with sensitivity labels, access reviews, and entitlement management.\n\nData Protection and Encryption – (Nice to have)\n\nDesign data classification and labelling strategies with Microsoft Purview; enforce DLP across endpoints, Exchange, SharePoint, and Teams.\n\nImplement eDiscovery, legal hold, and audit configurations for regulatory needs.\n\nRequirements\n\nYou hold a citizenship of a NATO member state or the Austrian citizenship;\n\nAt least 3 years of experience in information security specific to Azure or Microsoft 365 cloud environments.\n\nProven expertise with Microsoft’s cloud security services, including Entra ID, Microsoft Sentinel, and Microsoft Defender for Cloud, Defender for Endpoint, Defender for Cloud Apps, Defender for Identity, Intune, and/or Purview.\n\nExperience with cloud security best practices and related frameworks. For example: CIS Benchmarks, Microsoft Cloud Security Benchmark, etc.\n\nStrong communication, documentation and reporting skills.\n\nRelevant current Microsoft cloud certifications. For example: AZ-104, SC-900, SC-200, SC-300, SC-401, or SC-500.\n\nPreferred:\n\nBachelor’s degree in Computer Science, Cyber Security, Information Security, Engineering, Information Technology, or related studies.\n\nExperience in consulting.\n\nOther vendor-agnostic cybersecurity certifications. E.g. SSCP, CompTIA Security+, or equivalent.\n\nExperience with scripting languages such as PowerShell or Python.\n\nWhat do we offer\n\nAt NVISO, we care. We are committed to offering you a highly competitive remuneration package including financial and non-financial components:\n\nWorking with and learning from the best people in the European cyber security “scene”. We have several SANS Instructors working for us and we are also represented at popular hacking conferences (BlackHat, BruCON, OWASP, etc.). In addition, our employees can take advantage of prestigious continuing education opportunities (GSE, GXPN, CISSP, OSCP, etc.);\n\nA forward-thinking and agile company that supports you in the creation and implementation of new initiatives;\n\nUnique team events (most recently e.g. Lisbon, Dubai, Malta);\n\nGenerous training budget of 10.000 EUR + 10 man days for attending lectures rolling over 2 years;\n\nBase salary range (depending on experience and skillset): 69.000 EUR p.a. – 91.000 EUR p.a.;\n\nRegular team-building and fun events;\n\nOur commitment to coach and counsel you and help you grow; each employee receives a personal coach within the team, whose role is to ensure your well-being and helps you grow in your career!\n\nFlexible working hours and home office possibilities (incl. working abroad weeks within the EU);\n\nBusiness Bike Leasing;\n\nBahnCard 50 1st class + public transfer ticket or EGYM WellPass;\n\n30 holidays;\n\nCompany Pension Scheme;\n\nCool offices in the center of Frankfurt and Munich (with BBQ, kicker table, table tennis, etc.).\n\nIF YOU’RE INTERESTED, PLEASE SEND US YOUR APPLICATION!\n\nWE’RE LOOKING FORWARD TO MEETING YOU!\n\nGet support [entfernt]\n\nBelgium\n\nGuimardstraat 8 b6 1040 Brussels [entfernt]\n\nGermany\n\nHolzgraben 5 60313 Frankfurt am Main Machtlfinger Str. 21 81379 München [entfernt]\n\nAustria\n\nGumpendorfer Straße 19-21 1060 Wien [entfernt]\n\nGreece\n\nHatziyianni Mexi 5 Athens 11528 [entfernt]","responsibilities_text":"We are aware that cloud security features and products are abundant; the following list apply to the ones of interest to us. If you have experience or feel capable of conducting only some of them (not the full list), please reach out!\nStrategy and Governance\nAssess cloud security posture against frameworks (e.g., CIS, NIST, ISO 27001) and Microsoft benchmarks (Azure Security Benchmark, M365 baseline).\nDefine cloud security strategy, target operating model, and roadmap aligned to business and regulatory requirements.\nDevelop and maintain cloud security policies, standards, and guardrails for Azure and M365.\nIdentity and Access Management (IAM)\nDesign and implement Microsoft Entra tenant architecture, including identity lifecycle, conditional access, and MFA.\nImplement and tune Conditional Access policies, risk-based access, and device compliance integrations with Intune/Endpoint Manager.\nDeploy and operate Privileged Access Management (PAM), including PIM for Azure and M365 roles, just-in-time access, and break-glass accounts.\nIntegrate on-premises identities (hybrid) with secure synchronization and hardening of federation where used.\nPlatform Security and Hardening (Azure)\nBuild secure landing zones using Azure Policy, Blueprints/Bicep/Terraform, and management groups.\nEnforce baseline controls for networking (NSGs, Azure Firewall, Private Link), compute (secure images, patching), and storage (encryption, private endpoints).\nConfigure Azure Key Vault for secrets, keys, and certificates management with RBAC and purge protection.\nEnsure encryption at rest and in transit, customer-managed keys (CMK), and double encryption where required.\nImplement workload isolation, tagging, and resource locks; manage identity-based access (managed identities).\nThreat Protection and Monitoring\nDeploy and tune Microsoft Defender for Cloud, Defender for Cloud Apps (MCAS), Defender for Endpoint, and Defender for Identity.\nConfigure Microsoft Sentinel: data connectors, analytics rules, UEBA, watchlists, workbooks, and SOAR playbooks (Logic Apps).\nDevelop detection use cases, threat hunting queries (KQL), and incident response runbooks specific to Azure and M365 threats.\nEstablish alert triage, escalation paths, and continuous tuning to reduce noise and improve mean time to detect/respond.\nMicrosoft 365 Security – (Nice to have)\nConfigure and manage Microsoft Purview (Compliance portal) for DLP, information protection labels, data lifecycle, and insider risk.\nImplement Exchange Online, SharePoint, OneDrive, and Teams security baselines, safe links/attachments, and anti-phishing policies.\nEnforce device compliance via Intune, app protection policies, and conditional access for BYOD and corporate devices.\nSecure collaboration and external sharing with sensitivity labels, access reviews, and entitlement management.\nData Protection and Encryption – (Nice to have)\nDesign data classification and labelling strategies with Microsoft Purview; enforce DLP across endpoints, Exchange, SharePoint, and Teams.\nImplement eDiscovery, legal hold, and audit configurations for regulatory needs.","requirements_text":"You hold a citizenship of a NATO member state or the Austrian citizenship;\nAt least 3 years of experience in information security specific to Azure or Microsoft 365 cloud environments.\nProven expertise with Microsoft’s cloud security services, including Entra ID, Microsoft Sentinel, and Microsoft Defender for Cloud, Defender for Endpoint, Defender for Cloud Apps, Defender for Identity, Intune, and/or Purview.\nExperience with cloud security best practices and related frameworks. For example: CIS Benchmarks, Microsoft Cloud Security Benchmark, etc.\nStrong communication, documentation and reporting skills.\nRelevant current Microsoft cloud certifications. For example: AZ-104, SC-900, SC-200, SC-300, SC-401, or SC-500.\nPreferred:\nBachelor’s degree in Computer Science, Cyber Security, Information Security, Engineering, Information Technology, or related studies.\nExperience in consulting.\nOther vendor-agnostic cybersecurity certifications. E.g. SSCP, CompTIA Security+, or equivalent.\nExperience with scripting languages such as PowerShell or Python.\nWhat do we offer\nAt NVISO, we care. We are committed to offering you a highly competitive remuneration package including financial and non-financial components:\nWorking with and learning from the best people in the European cyber security “scene”. We have several SANS Instructors working for us and we are also represented at popular hacking conferences (BlackHat, BruCON, OWASP, etc.). In addition, our employees can take advantage of prestigious continuing education opportunities (GSE, GXPN, CISSP, OSCP, etc.);\nA forward-thinking and agile company that supports you in the creation and implementation of new initiatives;\nUnique team events (most recently e.g. Lisbon, Dubai, Malta);\nGenerous training budget of 10.000 EUR + 10 man days for attending lectures rolling over 2 years;\nBase salary range (depending on experience and skillset): 69.000 EUR p.a. – 91.000 EUR p.a.;\nRegular team-building and fun events;\nOur commitment to coach and counsel you and help you grow; each employee receives a personal coach within the team, whose role is to ensure your well-being and helps you grow in your career!\nFlexible working hours and home office possibilities (incl. working abroad weeks within the EU);\nBusiness Bike Leasing;\nBahnCard 50 1st class + public transfer ticket or EGYM WellPass;\n30 holidays;\nCompany Pension Scheme;\nCool offices in the center of Frankfurt and Munich (with BBQ, kicker table, table tennis, etc.).\nIF YOU’RE INTERESTED, PLEASE SEND US YOUR APPLICATION!\nWE’RE LOOKING FORWARD TO MEETING YOU!\nGet support [entfernt]\nBelgium\nGuimardstraat 8 b6 1040 Brussels [entfernt]\nGermany\nHolzgraben 5 60313 Frankfurt am Main Machtlfinger Str. 21 81379 München [entfernt]\nAustria\nGumpendorfer Straße 19-21 1060 Wien [entfernt]\nGreece\nHatziyianni Mexi 5 Athens 11528 [entfernt]","status":"open","duplicate_of":null,"first_seen":"2026-11-12T16:39:31.056290+00:00","responsibilities_summary":null,"requirements_summary":null,"all_tools":["Azure","Active Directory","Microsoft Sentinel","PowerShell","Python","OWASP","Agile","ISO 27001","IAM"],"posting_language":"en","evidence":[],"years_experience_max":null,"mobility_evidence":[],"model_version":"rules-11","english_badge":"English required","company_id":null}