Senior Information Security Engineer

Endpoint & Cloud Security Responsibilities
• Develop and enforce endpoint security policies and procedures.
• Guide IT/network teams on security best practices.
• Implement and manage endpoint protection against malware/ransomware.
• Lead end‑to‑end security projects (design → implementation → testing → documentation).
• Design, troubleshoot, and implement Microsoft 365 & Azure security/compliance solutions.
• Build Microsoft 365 security/compliance integrations.
• Conduct PoC testing for new security technologies.
• Design and implement DLP (Microsoft Purview) and encryption for cloud/on‑prem data.
• Work with GRC teams to resolve audit findings and implement remediation. Infrastructure Security Assessment
• Database security reviews for SQL Server, Oracle, PostgreSQL, MySQL, MongoDB.
• Web/app server security for IIS, Apache Tomcat, JBoss.
• Assess servers, networks, databases, middleware, virtualization, cloud environments.
• Review configurations against CIS Benchmarks, NIST, vendor standards.
• IAM

experience:
AD, LDAP, RBAC, PAM, authentication, identity lifecycle.
• Regulatory compliance: GDPR, UAE PDPL, CBUAE, PCI DSS, ISO 27001, ISR. Container Security Assessment
• Assess Docker, Podman, CRI‑O, Kubernetes, OpenShift for vulnerabilities & misconfigurations.
• Harden container images (minimal base images, signature validation, trusted registries).
• Review Kubernetes manifests, Helm charts, RBAC, admission controls, network policies.
• Evaluate API access controls, service accounts, secrets management.
• Assess Kubernetes network policies, segmentation, Istio/Linkerd service mesh security.
• Review TLS/mTLS for pod/service communications.
• Secure CI/CD supply chain (Trivy, Anchore, Clair, SBOM validation).
• Runtime monitoring using Falco, Aqua, Prisma Cloud, Sysdig. CI/CD Automation Security Assessment
• Assess Jenkins, GitLab CI/CD, GitHub Actions for vulnerabilities & misconfigurations.
• Secure build/deployment processes and artifact integrity.
• Enforce SAST, DAST, SCA, secrets scanning, container scanning via quality gates.
• Evaluate integrations with cloud services, repos, registries, container platforms.
• Assess software supply chain risks (dependency confusion, tampering).
• Integrate CI/CD logs with SIEM; ensure forensic readiness. Cloud Security Assessments
• Security assessments across Azure, AWS, GCP, OCI.
• Review cloud security architecture (networking, segmentation, identity, RBAC, conditional access).
• Evaluate CASB controls for visibility, governance, data protection, threat management.
• Assess cloud posture using CSPM tools (e.g., Wiz).
• Assess SaaS posture via SSPM platforms.
• Evaluate cloud data protection using Microsoft Purview (classification, encryption, DLP). AI Security Architecture Assessment
• Assess AI/ML lifecycle security (data → model → deployment → operation → retirement).
• Review secure AI architecture (trust boundaries, segmentation, identity, API security, encryption, logging).
• Apply AI risk/governance frameworks to define controls and assurance activities. Project Management
• Plan and execute security projects (scope, deliverables, timelines, resources).
• Communicate with technical teams, business owners, vendors, senior stakeholders.
• Manage risks, issues, dependencies, change requests.
• Coordinate vendors and ensure contractual deliverables. Security Certifications
• SC‑401 (Microsoft Information Security Administrator)
• SC‑900 (Microsoft Security, Compliance & Identity Fundamentals)
• CISSP
• CCSK