{bc}
indeed

Senior Information Security Engineer

DICETEK LLC
Dubai, UAE
Contract
Senior
Onsite
Discovered 6 days ago
Endpoint security and protectionMicrosoft 365 security and complianceMicrosoft Azure securityMicrosoft PurviewData loss prevention and encryptionInfrastructure security assessment

Full Job Posting

Endpoint, cloud, and infrastructure security

  • Develop and enforce endpoint security policies, guide IT and network teams on security practices, and manage protection against malware and ransomware.
  • Lead end-to-end security projects; design, troubleshoot, and implement Microsoft 365 and Azure security and compliance solutions.
  • Build Microsoft 365 security integrations, conduct proof-of-concept testing, and implement Microsoft Purview DLP and encryption for cloud and on-premises data.
  • Work with GRC teams to resolve audit findings and implement remediation.
  • Assess database, web and application servers, networks, middleware, virtualization, and cloud environments against CIS Benchmarks, NIST, and vendor standards.
  • Review IAM controls, including Active Directory, LDAP, RBAC, PAM, authentication, and identity lifecycle.

Container and CI/CD security

  • Assess Docker, Podman, CRI-O, Kubernetes, and OpenShift for vulnerabilities and misconfigurations; harden images and review manifests, Helm charts, RBAC, admission controls, and network policies.
  • Evaluate API access, service accounts, secrets management, segmentation, Istio or Linkerd service mesh security, and TLS/mTLS communications.
  • Assess Jenkins, GitLab CI/CD, and GitHub Actions; secure build and deployment processes, artifact integrity, and software supply chains.
  • Enforce SAST, DAST, SCA, secrets scanning, and container scanning through quality gates; integrate CI/CD logs with SIEM for forensic readiness.

Cloud and AI security assessments

  • Assess cloud security across Azure, AWS, GCP, and OCI, including networking, segmentation, identity, RBAC, and conditional access.
  • Evaluate CASB controls, cloud posture with CSPM tools such as Wiz, SaaS posture with SSPM platforms, and cloud data protection using Microsoft Purview.
  • Assess AI/ML lifecycle security across data, model, deployment, operation, and retirement.
  • Review AI security architecture and apply AI risk and governance frameworks to define controls and assurance activities.

Project management

  • Plan and execute security projects, including scope, deliverables, timelines, and resources.
  • Communicate with technical teams, business owners, vendors, and senior stakeholders; manage risks, issues, dependencies, and change requests.
  • Coordinate vendors and ensure contractual deliverables.

Qualification criteria

  • The posting specifies security architecture, cloud security, or infrastructure security experience together with endpoint security.
  • The qualification criteria list cloud experience with Azure, AWS, GCP, or OCI; container experience with Kubernetes, OpenShift, or Docker; and CI/CD or Jenkins experience.
  • The criteria also list IAM, RBAC, or PAM and AI/ML security experience.

Security technologies and standards

  • Cloud and productivity platforms include Microsoft 365, Azure, AWS, GCP, OCI, and Microsoft Purview.
  • Container and delivery technologies include Docker, Podman, CRI-O, Kubernetes, OpenShift, Jenkins, GitLab CI/CD, and GitHub Actions.
  • Standards and regulations listed include CIS Benchmarks, NIST, GDPR, UAE PDPL, CBUAE, PCI DSS, ISO 27001, and ISR.
  • Tools listed include Trivy, Anchore, Clair, Falco, Aqua, Prisma Cloud, Sysdig, and Wiz.

Certifications

  • The description lists SC-401, SC-900, CISSP, and CCSK under Security Certifications but does not state that any certification is mandatory.

Apply for this job in 1 click

Skip the repetitive application forms

Install the Base Career Chrome Extension and autofill job applications across major job boards with your profile.

Sarah M.James T.Maya R.

Trusted by over 500,000 job seekers on Base Career

Start Free Today

More from this employer

More jobs at DICETEK LLC