Cloud Security Engineer

APPIT Software Inc.; Dubai; On-site; AED 100,000 - 130,000; Full time

Job summary

APPIT Software Inc. in Dubai is looking for a Cloud Security Engineer to design and implement robust security architectures across cloud platforms like AWS, Azure, and GCP. The candidate should have 5-8 years of security engineering experience, with deep knowledge of specific cloud security services and a focus on zero-trust principles.

This role involves deploying cloud-native security tools, automating compliance processes, and performing security assessments. Knowledge of regional compliance frameworks and related cloud certifications is a plus.

Qualifications

• 5–8 years of security engineering experience, with at least 3 years in cloud security.
• Deep knowledge of AWS and Azure security services.
• Experience in implementing zero-trust network architectures.

Responsibilities

• Design and implement zero-trust security architectures across AWS, Azure, and GCP.
• Deploy and manage cloud-native security tools.
• Automate security compliance scanning and remediation.
• Conduct cloud security assessments and penetration testing.

Skills

Cloud Security (AWS, Azure)

Zero Trust and Microsegmentation

Kubernetes Security and RBAC

Compliance (CSPM, Threat Detection)

Tools

Security Automation Tools

Infrastructure-as-Code Security Scanning Tools

Job description

Responsibilities

• Design and implement zero‑trust security architectures across AWS, Azure, and GCP cloud environments.
• Deploy and manage cloud‑native security tools including CSPM, CWPP, and CNAPP solutions.
• Automate security compliance scanning and remediation for CIS Benchmarks, NIST, and regional regulations.
• Implement container and Kubernetes security controls including image scanning, runtime protection, and admission policies.
• Conduct cloud security assessments, threat modeling, and penetration testing for infrastructure services.
• Develop and maintain security incident response playbooks for cloud‑specific attack vectors.

Skills

• Cloud Security (AWS, Azure)
• Zero Trust and Microsegmentation
• Kubernetes Security and RBAC
• Compliance (CSPM, Threat Detection)

Requirements

• 5–8 years of security engineering experience with at least 3 years focused on cloud security.
• Deep knowledge of cloud security services across AWS (GuardDuty, Security Hub, IAM) or Azure (Defender, Sentinel).
• Experience implementing zero‑trust network architectures using microsegmentation and identity‑based access.
• Strong understanding of container security, Kubernetes RBAC, network policies, and supply‑chain security.
• Familiarity with compliance frameworks relevant to the Middle East (NESA, PDPL) and international standards (SOC2, ISO27001).
• Experience with security automation and infrastructure‑as‑code security scanning tools.

Nice to Have

• CCSP, AWS Security Specialty, or equivalent cloud security certification.
• Experience with cloud forensics and incident investigation techniques.
• Knowledge of SIEM integration with cloud‑native log sources.