Lead Cyber Security Engineer

Role overview

Security operations and controls

• Own the outsourced SOC, challenge triage, build detections for threats such as claims fraud and health data exfiltration, run purple-team tests, and lead major incidents.
• Operate DLP (Purview/Forcepoint), Intune/MDM, patching, and vulnerability management; prioritize using CVSS, EPSS, and CISA KEV.
• Secure policy, claims, underwriting, ERP, portal, mobile, and API systems; set vendor security requirements and provide security sign-off before go-live.
• Scope and commission VAPT, reproduce key findings, and close findings only on evidence.
• Harden endpoints, infrastructure, and networks using EDR/XDR, Azure/AWS/M365, Entra ID, PAM, zero trust, and firewall/WAF reviews.

Compliance and reporting

• Maintain an audit gap tracker and unified control framework spanning ISO 27001, ADHICS, UAE IA, CBUAE, and PDPL.
• Prepare monthly metrics and a quarterly cyber risk report for the Board.

Required qualifications

• 8–12 years of hands-on cyber security engineering or operations experience.
• Experience managing an outsourced SOC, leading incidents, running VAPT and vulnerability programmes, and closing audit findings.
• ISO 27001 implementation or audit experience and direct experience with CBUAE, UAE IA, DoH/ADHICS, or DHA regulators.
• At least one hands-on technical certification, such as OSCP, GCIH, GCIA, GCFA, GPEN, AZ-500, or a firewall or EDR vendor certification; CISSP, CISM, and CISA do not replace this requirement.
• PowerShell or Python scripting for automation.
• Bachelor’s degree in Computer Science, Information Security, Engineering, or a related field.

Advantageous experience

• Insurance, takaful, broker, TPA, health insurance, or CBUAE-regulated banking background is a plus.
• Exposure to DESC ISR, SAMA CSF, or NCA ECC is a plus.