Cyber Security Engineer

The Role The Cyber Security Engineer assumes a crucial role in safeguarding the organization s information assets by maintaining the confidentiality, integrity, and availability of critical data. They are responsible for implementing and managing robust security measures, conducting comprehensive security assessments, mitigating vulnerabilities, and promptly responding to security incidents. The Cyber Security Engineer collaborates closely with cross-functional teams to identify potential threats, deploy effective controls, and provide technical expertise to fortify the organization s systems, networks, and data against cyber threats and malicious activities. What You ll Be Doing Work closely with Information Security head on analyzing and identifying various information security related risks and vulnerabilities. Propose, design and implement relevant security changes, where feasible. Analyze regulatory security requirements across GCC where required. Play a core role in the design and acceptance of new infrastructure and platform initiatives from a security perspective. Perform regular internal and external vulnerability scans as per the corporate policies and procedures, and advise DevOps Team about priorities, Organize regular internal and external penetration tests as per the corporate policies and procedures. Support Technology teams in various internal and external security audits with focus on automated / regular infrastructure audits (IAC security) Cloud services / Terraform / k8s etc. Lead, in close collaboration with other Technology team, the remediation of audits, scans and pen-tests findings. Coordinate the installation, configuration, and maintenance of mission-critical security applications such as AV, SIEM, DLP, FIM with DevOps and others related. Champion information security topics and concepts amongst the Technology team while acting as an ambassador for the InfoSec team. Help with source code security reviews for various development languages.

Desired Candidate Profile

Excellent communication skills, both written and oral. Strong interpersonal, organizational skills and a team player Positive can-do attitude and a flexible approach. Excellent analytical skills and detail oriented Ability to learn new technology, systems and applications quickly. Capability to think on your feet , solve problems and also predict and resolve future issues Strong stakeholder management skills and an ability to partner effectively with all. Degree in Engineering or Information Technology related field Minimum of 3 years work experience in Information Security engineering Excellent understanding of various information security frameworks and practices. Working experience with PCI-DSS compliance is a great plus Advanced working experience with infrastructure security tools including but not limited to WAFs, IP/IDS, NextGen Firewall, Advanced working experience with system-level security tools including but not limited to Antivirus, File Integrity Monitoring, Log Management (SIEM) - Wazuh/OSSEC, Identity Access Management. Good knowledge in Kubernetes, Docker Swarm or other cluster management software'