{bc}
indeed

Senior Information Security Engineer

DICETEK LLC
Dubai, UAE
Contract
Onsite
Discovered 1 weeks ago
Endpoint security and protectionMicrosoft 365 security and complianceAzure securityMicrosoft PurviewData loss prevention (DLP) and encryptionInfrastructure security assessment

Full Job Posting

Endpoint and cloud security

  • Develop and enforce endpoint security policies and procedures; guide IT and network teams on security practices.
  • Implement and manage endpoint protection against malware and ransomware.
  • Lead security projects through design, implementation, testing, and documentation.
  • Design, troubleshoot, and implement Microsoft 365 and Azure security and compliance solutions and integrations.
  • Conduct proof-of-concept testing; implement Microsoft Purview DLP and encryption for cloud and on-premises data.
  • Work with GRC teams to resolve audit findings and implement remediation.

Infrastructure security assessment

  • Review database security for SQL Server, Oracle, PostgreSQL, MySQL, and MongoDB, and web or application server security for IIS, Apache Tomcat, and JBoss.
  • Assess servers, networks, databases, middleware, virtualization, and cloud environments against CIS Benchmarks, NIST, and vendor standards.
  • Assess IAM, including Active Directory, LDAP, RBAC, PAM, authentication, and identity lifecycle.
  • Address compliance requirements including GDPR, UAE PDPL, CBUAE, PCI DSS, ISO 27001, and ISR.

Container security assessment

  • Assess Docker, Podman, CRI-O, Kubernetes, and OpenShift for vulnerabilities and misconfigurations; harden images and review trusted registries and signatures.
  • Review Kubernetes manifests, Helm charts, RBAC, admission controls, network policies, API access, service accounts, and secrets management.
  • Assess segmentation, Istio or Linkerd service mesh security, and TLS/mTLS for pod and service communications.
  • Secure CI/CD supply chains using tools such as Trivy, Anchore, and Clair, with SBOM validation; monitor runtime with tools such as Falco, Aqua, Prisma Cloud, and Sysdig.

CI/CD and cloud security assessment

  • Assess Jenkins, GitLab CI/CD, and GitHub Actions for vulnerabilities and misconfigurations; secure build and deployment processes and artifact integrity.
  • Enforce SAST, DAST, SCA, secrets scanning, and container scanning through quality gates; assess integrations and software supply-chain risks.
  • Integrate CI/CD logs with SIEM and support forensic readiness.
  • Assess security across Azure, AWS, GCP, and OCI, including cloud architecture, networking, identity, RBAC, and conditional access.
  • Evaluate CASB controls, CSPM tools such as Wiz, SSPM platforms, and Microsoft Purview data protection.

AI security and project management

  • Assess AI/ML lifecycle security from data and model through deployment, operation, and retirement.
  • Review secure AI architecture, including trust boundaries, segmentation, identity, API security, encryption, and logging; apply AI risk and governance frameworks.
  • Plan and execute security projects, managing scope, deliverables, timelines, resources, risks, issues, dependencies, and change requests.
  • Communicate with technical teams, business owners, vendors, and senior stakeholders; coordinate vendors and contractual deliverables.

Qualification criteria

  • Experience aligned with security architecture, cloud security, or infrastructure security, including endpoint security.
  • Experience with Azure, AWS, GCP, or OCI; Kubernetes, OpenShift, or Docker; CI/CD or Jenkins; and IAM, RBAC, or PAM.
  • AI/ML security experience.

Listed certifications

  • The description lists SC-401, SC-900, CISSP, and CCSK; it does not state that these certifications are mandatory.

Apply for this job in 1 click

Skip the repetitive application forms

Install the Base Career Chrome Extension and autofill job applications across major job boards with your profile.

Sarah M.James T.Maya R.

Trusted by over 500,000 job seekers on Base Career

Start Free Today

More from this employer

More jobs at DICETEK LLC