Live Jobs

Job Title:InfoSec Engineer

Location: Abu Dhabi, United Arab Emirates

Employment Type: Contract

Job Summary
We are seeking an experienced and highly skilled Cybersecurity Specialist with a strong background in penetration testing, infrastructure risk assessment, and incident response. This role is critical for enhancing our organization's security posture, protecting assets, and ensuring compliance with industry standards. The ideal candidate will have a deep understanding of threat intelligence, web application security, product security testing, and Red Team operations. You will play a key role in identifying vulnerabilities, implementing security measures, and improving risk management processes.

Key Responsibilities

• Penetration Testing
  Conduct in-depth penetration testing of applications, systems, and networks to identify vulnerabilities and potential security risks. Simulate attacks to discover potential weaknesses in the infrastructure and applications.
• Infrastructure Risk Assessment
  Perform comprehensive infrastructure risk assessments, evaluating critical systems, networks, and cloud environments for security vulnerabilities and compliance gaps.
• Incident Response
  Lead incident response efforts, coordinating across teams to identify, investigate, and mitigate security incidents. Develop and refine incident response playbooks and workflows.
• Web Application & Product Security Testing
  Assess the security of web applications and products, ensuring they meet security standards and are free from critical vulnerabilities. Provide security recommendations during product development phases.
• Threat Intelligence & Red Team Operations
  Leverage threat intelligence to stay ahead of emerging threats and inform Red Team exercises. Participate in or lead Red Team activities to simulate adversarial attacks and improve the organization’s defense mechanisms.
• Patching, Vulnerability, and Report Management
  Manage the lifecycle of vulnerabilities from discovery to remediation, including patching and tracking. Optimize vulnerability reports for both technical teams and business stakeholders to ensure actionable insights.
• Risk Filtering & Report Optimization
  Filter and prioritize security risks to focus efforts on high-impact vulnerabilities. Continuously improve the quality and relevance of security reports, ensuring clarity and actionability for various audiences.
• Security Scanning & Testing
  Perform regular scanning and security testing of internal and external environments, identifying misconfigurations, unpatched systems, and other risks.
• Cloud Security – Azure Landing Zones
  Ensure secure design and configuration of Azure landing zones, following best practices for securing cloud environments. Collaborate with cloud architects to maintain robust security controls.
• Endpoint & Data Protection
  Implement and manage endpoint protection and data security solutions across the organization. Ensure that sensitive data is adequately protected from unauthorized access, leakage, and breaches.
• Office 365 Compliance
  Oversee security configurations and compliance within Office 365 environments. Ensure adherence to corporate security policies and relevant regulations.

Required Qualifications

• Experience:
  • Experience in penetration testing, vulnerability management, and incident response.
  • Strong background in infrastructure security, web application security, and Red Team exercises.
• Technical Skills:
  • Proficiency in penetration testing tools (e.g., Burp Suite, Metasploit, Nmap).
  • Experience with vulnerability scanners (e.g., Qualys, Nessus) and patch management systems.
  • Deep understanding of cloud security, particularly Azure landing zones.
  • Familiarity with Office 365 security and compliance standards.
  • Strong knowledge of endpoint protection solutions and data security principles