Senior Information Security Engineer
Key Skills for This Role
Full Job Posting
Endpoint and cloud security
- Develop and enforce endpoint security policies and procedures; guide IT and network teams on security best practices.
- Implement and manage endpoint protection against malware and ransomware.
- Lead security projects through design, implementation, testing, and documentation.
- Design, troubleshoot, and implement Microsoft 365 and Azure security and compliance solutions and integrations.
- Conduct proof-of-concept testing for new security technologies.
- Design and implement Microsoft Purview data loss prevention and encryption for cloud and on-premises data.
- Work with GRC teams to resolve audit findings and implement remediation.
Infrastructure security assessment
- Review security for SQL Server, Oracle, PostgreSQL, MySQL, and MongoDB databases, and IIS, Apache Tomcat, and JBoss servers.
- Assess servers, networks, databases, middleware, virtualization, and cloud environments against CIS Benchmarks, NIST, and vendor standards.
- Assess IAM, including Active Directory, LDAP, RBAC, PAM, authentication, and identity lifecycle.
- Address regulatory frameworks and requirements including GDPR, UAE PDPL, CBUAE, PCI DSS, ISO 27001, and ISR.
Container security assessment
- Assess Docker, Podman, CRI-O, Kubernetes, and OpenShift for vulnerabilities and misconfigurations.
- Harden container images through minimal base images, signature validation, and trusted registries.
- Review Kubernetes manifests, Helm charts, RBAC, admission controls, network policies, API access, service accounts, and secrets management.
- Assess service mesh security, TLS/mTLS, and container network segmentation.
- Secure CI/CD supply chains using tools such as Trivy, Anchore, and Clair, and validate software bills of materials.
- Monitor runtime security using Falco, Aqua, Prisma Cloud, or Sysdig.
CI/CD and cloud security
- Assess Jenkins, GitLab CI/CD, and GitHub Actions for vulnerabilities and misconfigurations.
- Secure build and deployment processes and artifact integrity; enforce SAST, DAST, SCA, secrets scanning, and container scanning through quality gates.
- Assess integrations, software supply chain risks, and CI/CD log integration with SIEM for forensic readiness.
- Conduct security assessments across Azure, AWS, GCP, and OCI, including architecture, CASB controls, CSPM, and SaaS posture.
- Assess cloud data protection using Microsoft Purview for classification, encryption, and DLP.
AI security and project management
- Assess AI/ML lifecycle security across data, model, deployment, operation, and retirement.
- Review secure AI architecture, including trust boundaries, identity, API security, encryption, and logging; apply AI risk and governance frameworks.
- Plan and execute security projects, manage risks, issues, dependencies, and change requests, and coordinate vendors and stakeholders.
Qualification criteria
- Security architecture, cloud security, or infrastructure security experience with endpoint security experience.
- Experience with Azure, AWS, GCP, or OCI; Kubernetes, OpenShift, or Docker; CI/CD or Jenkins; and IAM, RBAC, or PAM.
- AI/ML security experience.
Certifications listed
- SC-401, SC-900, CISSP, and CCSK are listed under security certifications; the posting does not explicitly state that any is mandatory.
Apply for this job in 1 click
Skip the repetitive application forms
Install the Base Career Chrome Extension and autofill job applications across major job boards with your profile.
Trusted by over 500,000 job seekers on Base Career
More from this employer
More jobs at DICETEK LLC
CMDB Engineer
, UAE
DICETEK LLC seeks a CMDB Engineer with 5+ years of configuration/data-management experience, including 4+ years with ServiceNow. The role maintains CMDB accuracy, governs CI lifecycle and relationships, troubleshoots IRE
Recruitment Coordinator (UAE National)
, UAE
The employer is seeking a junior Recruitment Coordinator to coordinate outsourced recruitment and onboarding with internal departments and vendors. A diploma is required, along with essential written and spoken English a
English Content Specialist
, UAE
The employer is seeking an English Content Specialist to develop, proofread, and refine customer and marketing content while maintaining the bank’s brand voice. Candidates should have excellent written English; a relevan
SOC Analyst – L1 (Security Operations Center)
, UAE
The employer is seeking an L1 SOC Analyst to monitor security alerts, investigate potential incidents, and support incident response. Candidates should have 1–3 years of SOC or cybersecurity experience, foundational SIEM
System Engineer
, UAE
The employer is seeking a System Engineer to migrate and configure Windows/Linux workloads, Active Directory, and MSSQL services, with related disaster recovery and security work. Candidates should be well versed in VMwa
S2I Business Support Analyst - Oracle Fusion S2I
, UAE
The role provides business support to Group Sourcing during an Oracle Fusion S2I implementation, from data readiness and documentation through UAT, go-live, and stabilization. Applicants need ERP or Oracle Fusion impleme
Senior Business Analyst – Oracle Fusion S2I
, UAE
The employer is seeking a senior business analyst to support Group Sourcing through an Oracle Fusion S2I implementation. The role covers procurement requirements, solution validation, testing and UAT, AI use cases, chang
Senior Project Manager – Oracle Fusion ERP
, UAE
The employer seeks a Senior Project Manager to lead key phases of an ongoing Oracle Fusion Cloud ERP implementation. The role covers end-to-end delivery, UAT, data migration, cutover, go-live, and post-launch stabilizati
CMDB Engineer
, UAE
Recruitment Coordinator (UAE National)
, UAE
English Content Specialist
, UAE
SOC Analyst – L1 (Security Operations Center)
, UAE
System Engineer
, UAE
S2I Business Support Analyst - Oracle Fusion S2I
, UAE
Senior Business Analyst – Oracle Fusion S2I
, UAE
Senior Project Manager – Oracle Fusion ERP
, UAE