Cloud Security Engineer

Bachelor’s degree in a computer-related field such as computer science, cyber/information security discipline, physics, mathematics or similar

 General Information Security: CISSP, OSCP, CEH, CISM/CISA or similar  General Cloud Security: CCSK /CCSP or similar  Specific Cloud Security: AWS/Azure/GCP/Oracle Solution/Security or similar  Network Security: CCNA, CCNP, CCIE, Certified Kubernetes Security Specialist

Desirable
B. Experiences (Years & Type)  Industry  Regional  Functional
Must have minimum 4 years of experience in an information security function with good background in information technology, stakeholder management and people management

Minimum 3 years of experience, as a Security Engineer especially in Cloud Native environments
Essential

Essential
C. Knowledge & Skills  Technical  Functional  Managerial

Deep foundational knowledge, understanding and application on all aspects of Information Security concepts from broad range of technical and non- technical areas (Technical)

Expert at the technology and frameworks in his/her area of expertise, and coach other architect on development

Good understanding of enterprise level target architecture and public and private cloud platforms (IaaS/PaaS)

Good hands-on experience solutioning technology architectures that involve perimeter protection, core protection and end-point protection/detection & API /Micro services Security

Experience working in a DevOps environment with knowledge of Continuous Integration, Containers, DAST/SAST tools and building Evil Stories (Technical)

Good knowledge of the concerns and threats that revolve around Cloud Security and how those concerns can be mitigated (Technical)

The Analyst / Engineer has the skill to follow design principles and applies design patterns to enforce maintainable and reusable patterns, in the form of code or otherwise

The Analyst / Engineer can understand and interpret potential issues found in source or compiled code

The Analyst / Engineer has automation skills/capability in the form of scripting or similar

The Analyst / Engineer can attack application and infrastructure assets, interpret threats, and suggest mitigating measures

Ability to interpret Security Requirements mandated by oversight functions and ensure comprehensive coverage of those requirements, via documentation, within high level design and/or during agile ceremonies, via Evil Stories

The Analyst / Engineer can propose options for solutions to the security requirements / patterns that provide a balance of security, user experience & performance

The Analyst / Engineer has the skill to discuss and present solutions to other architecture, security, development, and leadership teams.

The Analyst / Engineer can interpret and understand vulnerability assessment reports and calculate inherent and/or residual risks based on the assessment of such reports

Ability to articulate and be a persuasive leader who can serve as an effective member of the senior management team. Good negotiation skills will be desirable

Job Type: Full-time

Salary: AED15,000.00 – AED18,000.00 per month

Education:

• Bachelor's (Required)

Experience:

• Information Security Function: 4 years (Required)
• Cloud Security Engineer: 3 years (Required)