{bc}
Apply
indeed

Senior Information Security Engineer

DICETEK LLC
Dubai, UAE
Contract
Senior
Onsite
Discovered 1 weeks ago
Endpoint security and protectionMicrosoft 365 security and complianceMicrosoft Azure securityData loss prevention and encryptionInfrastructure security assessmentIdentity and access management (IAM)

Full Job Posting

Endpoint and Cloud Security

  • Develop and enforce endpoint security policies and procedures; guide IT/network teams on security best practices.
  • Implement and manage endpoint protection against malware and ransomware.
  • Lead security projects from design through implementation, testing, and documentation.
  • Design, troubleshoot, and implement Microsoft 365 and Azure security/compliance solutions and integrations.
  • Conduct proof-of-concept testing for new security technologies.
  • Design and implement Microsoft Purview data loss prevention and encryption for cloud and on-premises data.
  • Work with GRC teams to resolve audit findings and implement remediation.

Infrastructure Security Assessment

  • Review database security for SQL Server, Oracle, PostgreSQL, MySQL, and MongoDB.
  • Assess web/application servers including IIS, Apache Tomcat, and JBoss, as well as servers, networks, databases, middleware, virtualization, and cloud environments.
  • Review configurations against CIS Benchmarks, NIST, and vendor standards.
  • Apply IAM experience across AD, LDAP, RBAC, PAM, authentication, and identity lifecycle.
  • Address regulatory frameworks including GDPR, UAE PDPL, CBUAE, PCI DSS, ISO 27001, and ISR.

Container Security Assessment

  • Assess Docker, Podman, CRI-O, Kubernetes, and OpenShift for vulnerabilities and misconfigurations.
  • Harden container images using minimal base images, signature validation, and trusted registries.
  • Review Kubernetes manifests, Helm charts, RBAC, admission controls, and network policies.
  • Evaluate API access controls, service accounts, and secrets management.
  • Assess network policies, segmentation, Istio/Linkerd service mesh security, and TLS/mTLS for pod and service communications.
  • Secure CI/CD supply chains using Trivy, Anchore, Clair, and SBOM validation.
  • Use runtime monitoring tools including Falco, Aqua, Prisma Cloud, and Sysdig.

CI/CD Automation Security Assessment

  • Assess Jenkins, GitLab CI/CD, and GitHub Actions for vulnerabilities and misconfigurations.
  • Secure build/deployment processes and artifact integrity.
  • Enforce SAST, DAST, SCA, secrets scanning, and container scanning through quality gates.
  • Evaluate integrations with cloud services, repositories, registries, and container platforms.
  • Assess software supply-chain risks such as dependency confusion and tampering.
  • Integrate CI/CD logs with SIEM and ensure forensic readiness.

Cloud Security Assessments

  • Conduct security assessments across Azure, AWS, GCP, and OCI.
  • Review cloud security architecture, networking, segmentation, identity, RBAC, and conditional access.
  • Evaluate CASB controls for visibility, governance, data protection, and threat management.
  • Assess cloud posture using CSPM tools such as Wiz and SaaS posture using SSPM platforms.
  • Evaluate cloud data protection using Microsoft Purview classification, encryption, and DLP.

AI Security Architecture Assessment

  • Assess security throughout the AI/ML lifecycle, including data, model, deployment, operation, and retirement.
  • Review secure AI architecture, trust boundaries, segmentation, identity, API security, encryption, and logging.
  • Apply AI risk and governance frameworks to define controls and assurance activities.

Project Management

  • Plan and execute security projects, including scope, deliverables, timelines, and resources.
  • Communicate with technical teams, business owners, vendors, and senior stakeholders.
  • Manage risks, issues, dependencies, and change requests.
  • Coordinate vendors and ensure contractual deliverables.

Security Certifications

  • The source lists SC-401, SC-900, CISSP, and CCSK without stating that they are mandatory.

Qualification Criteria

  • The criteria mention security architecture, cloud or infrastructure security, endpoint security, a cloud platform, a container platform, CI/CD, IAM, and AI/ML security.

Apply for this job in 1 click

Skip the repetitive application forms

Install the Base Career Chrome Extension and autofill job applications across major job boards with your profile.

Sarah M.James T.Maya R.

Trusted by over 500,000 job seekers on Base Career

Start Free Today

More from this employer

More jobs at DICETEK LLC

Sanctions Technical Specialist

, UAE

Discovered TodayContract

AI Engineer

, UAE

Discovered TodayContract

S2I Business Support Analyst - Oracle Fusion S2I

, UAE

Discovered TodayContract

Senior Business Analyst – Oracle Fusion S2I

, UAE

Discovered TodayContract

Principal Administrative Officer (UAE National)

, UAE

Discovered TodayContract

CMDB Engineer

, UAE

Discovered TodayContract

Recruitment Coordinator (UAE National)

, UAE

Discovered TodayContract

English Content Specialist

, UAE

Discovered TodayContract