Cyber Security Engineer

NymCard; Dubai; On-site; AED 180,000 - 320,000; Full time

Job summary

NymCard in Dubai, UAE seeks an experienced Cyber Security Engineer to safeguard data confidentiality, integrity and availability. You will implement robust security measures, perform assessments, and guide threat mitigation across infrastructure, platforms, and applications.

You will collaborate with DevOps and Tech teams, run vulnerability scans and pen tests, and help architect secure cloud and container environments with PCI-DSS awareness.

Qualifications

• 3+ years of experience in information security engineering.
• Exposure to PCI-DSS compliance is a plus.
• Knowledge of information security frameworks and best practices.

Responsibilities

• Work with Information Security head to identify information security risks and vulnerabilities.
• Design and implement security changes where feasible.
• Analyze regulatory security requirements across GCC as needed.
• Contribute to secure design of new infrastructure and platforms.

Skills

Excellent communication

Strong interpersonal

Team player

Analytical ability

Problem solving

Learning agility

Stakeholder management

Kubernetes knowledge

Docker/Kubernetes security

Education

Engineering or IT degree

Tools

WAFs

IP/IDS

Next-Gen Firewall

Antivirus

File Integrity Monitoring

SIEM (Wazuh/OSSEC)

Identity and Access Management

Terraform / Kubernetes security

Job description

Our Company NymCard is a full-stack payments infrastructure company. Founded in 2018, we give banks and financial institutions one platform, nCore, to issue cards, move money, lend, settle, and manage financial crime as a single system, not separate vendors stitched together. nCore is AI-native and built on a real-time data core, so every product runs on one shared view of the customer. We're a team of 150+ with a high bar. AI isn't a department here, it's how every team works, and we back decisions with data, not opinion. The way we work has a name, BOLD: we build trust through transparency, we own outcomes rather than tasks, we lead with speed because in payments a delay is a real cost, and we deliver excellence as a habit. If you want real ownership and room to move fast, this is the team for you.

The Role

The Cyber Security Engineer assumes a crucial role in safeguarding the organization’s information assets by maintaining the confidentiality, integrity, and availability of critical data. They are responsible for implementing and managing robust security measures, conducting comprehensive security assessments, mitigating vulnerabilities, and promptly responding to security incidents. The Cyber Security Engineer collaborates closely with cross-functional teams to identify potential threats, deploy effective controls, and provide technical expertise to fortify the organization’s systems, networks, and data against cyber threats and malicious activities.

What You’ll Be Doing

• Work closely with Information Security head on analyzing and identifying various information security related risks and vulnerabilities.
• Propose, design and implement relevant security changes, where feasible.
• Analyze regulatory security requirements across GCC where required.
• Play a core role in the design and acceptance of new infrastructure and platform initiatives from a security perspective.
• Perform regular internal and external vulnerability scans as per the corporate policies and procedures, and advise DevOps Team about priorities.
• Organize regular internal and external penetration tests as per the corporate policies and procedures.
• Support Technology teams in various internal and external security audits with focus on automated / regular infrastructure audits (IAC security) — Cloud services / Terraform / k8s etc.
• Lead, in close collaboration with other Technology team, the remediation of audits, scans and pen-tests findings.
• Coordinate the installation, configuration, and maintenance of mission-critical security applications such as AV, SIEM, DLP, FIM with DevOps and others related.
• Champion information security topics and concepts amongst the Technology team while acting as an ambassador for the InfoSec team.
• Help with source code security reviews for various development languages.

What You Bring

• Excellent communication skills, both written and oral.
• Strong interpersonal, organizational skills and a team player
• Positive can-do attitude and a flexible approach.
• Excellent analytical skills and detail oriented
• Ability to learn new technology, systems and applications quickly.
• Capability to “think on your feet”, solve problems and also predict and resolve future issues
• Strong stakeholder management skills and an ability to partner effectively with all.
• Degree in Engineering or Information Technology related field
• Minimum of 3 years work experience in Information Security engineering
• Excellent understanding of various information security frameworks and practices. Working experience with PCI-DSS compliance is a great plus
• Advanced working experience with infrastructure security tools including but not limited to WAFs, IP/IDS, NextGen Firewall,
• Advanced working experience with system-level security tools including but not limited to Antivirus, File Integrity Monitoring, Log Management (SIEM) - Wazuh/OSSEC, Identity Access Management.
• Good knowledge in Kubernetes, Docker Swarm or other cluster management software