Cloud Security Engineer / Analyst

Arab Solutions

Job Description

We are seeking an experienced Cloud Security Engineer / Analyst to join our Cybersecurity Practice. In this role, you will work closely with our cloud, infrastructure, and security teams to design, implement, and maintain security controls that protect our clients cloud environments. Your responsibilities will include assessing cloud architectures, identifying security risks, implementing security best practices, and continuously monitoring cloud platforms to ensure confidentiality, integrity, and availability of systems and data. You will support secure adoption of cloud services across public, private, and hybrid environments, ensuring compliance with organizational policies, industry standards, and Qatari regulatory requirements. You will collaborate with cloud architects, DevOps teams, and application teams to embed security controls throughout the cloud lifecycle, including design, deployment, and operations. The role requires hands-on technical expertise, strong analytical skills, and the ability to translate security requirements into practical, scalable cloud security solutions.

Key Responsibilities

• Cloud Security Architecture and Assessment: Assess cloud architectures and environments across public, private, and hybrid cloud platforms to identify security risks and design appropriate security controls. Conduct security reviews of cloud services, configurations, and deployments, including compute, storage, networking, identity, and platform services. Provide detailed assessment reports with clear, actionable remediation recommendations aligned with industry best practices.
• Cloud Security Governance: Define, implement, and maintain cloud security governance frameworks, including security policies, standards, baselines, and control frameworks aligned with organizational and regulatory requirements. Establish clear roles and responsibilities through RACI models and support the development of cloud security operating procedures to ensure consistent, repeatable, and auditable security practices across cloud environments.
• Security Monitoring and Threat Detection: Implement and support cloud security monitoring solutions to detect misconfigurations, vulnerabilities, and suspicious activities. Analyze security alerts and events, investigate potential incidents, and support timely remediation to maintain the confidentiality, integrity, and availability of cloud environments.
• Identity and Access Management: Review and support secure implementation of identity and access controls, including role-based access control, least privilege, authentication, and authorization mechanisms across cloud platforms and services.
• Cloud Security Compliance: Ensure cloud environments comply with organizational security policies, regulatory requirements, and applicable security standards. Support continuous compliance monitoring and remediation of configuration gaps and policy violations.
• DevSecOps and Automation Support: Collaborate with DevOps and cloud engineering teams to integrate security controls into CI/CD pipelines and infrastructure-as-code workflows. Promote automation to improve security consistency, visibility, and scalability across cloud environments.
• Security Tools and Technologies: Evaluate, implement, and manage Cloud-Native Application Protection Platform (CNAPP) solutions to enhance cloud security posture, visibility, and threat detection. This includes third-party platforms such as Palo Alto Prisma Cloud as well as native cloud security solutions such as Microsoft Defender, covering posture management, workload protection, identity security, and runtime threat detection.
• Documentation and Reporting: Create and maintain comprehensive documentation related to cloud security architectures, assessments, controls, and operational procedures. Prepare security reports and dashboards for internal stakeholders and clients as required.
• Training and Awareness: Support security awareness initiatives by providing guidance and knowledge-sharing sessions to cloud, infrastructure, and development teams on secure cloud practices and emerging cloud security threats.