Data Security Engineer

K20s - Kinetic Technologies Private Limited; Abu Dhabi; On-site; AED 180,000 - 300,000; Full time

Job summary

K20s - Kinetic Technologies Private Limited is seeking an experienced Data Security Engineer with 4–5 years of hands-on security experience to design and operate enterprise data protection and encryption systems in a multi-site environment.

The role focuses on CipherTrust Manager, Guardium/Imperva DAM/FAM, ISO27001 compliance, and PCI DSS/GDPR audit support, with responsibilities spanning DLP, endpoint protection, and perimeter security.

Qualifications

• Bachelor’s Degree in Electrical Engineering, Computer Science, Information Technology, or related field.
• 4–5 years of proven IT data security, encryption, and compliance governance experience.
• Hands-on expertise with Thales CipherTrust Manager and KMIP protocols; HSMs.
• Experience with IBM Guardium and Imperva DAM/FAM; S-Tap deployments.
• Knowledge of ISO27001, PCI DSS, GDPR audits.

Responsibilities

• Deploy, configure, and maintain CipherTrust Manager and KMIP-based key management.
• Administer Guardium and Imperva DAM/FAM including S-Tap deployments.
• Lead ISO27001 control implementations and support PCI DSS/GDPR audits.
• Manage DLP and endpoint protection integration (Safetica, Heimdal, Defender).
• Monitor security operations and respond to incidents with vulnerability patching.
• Configure perimeter security: WAF, IPS/IDS, VPNs, AD integration.
• Perform vulnerability assessments using Nessus, BurpSuite, Nmap, Kali Linux.
• Collaborate with network, cloud, and infrastructure teams to design encryption policies.

Skills

Encryption & Key Management

Database Security

Security & Network Tools

Assessment & Evaluation

Platforms & Systems

Education

Bachelor’s Degree in Electrical Engineering, Computer Science, Information Technology, or a related field

Tools

CipherTrust Manager

TDE

CAKM

CTE

HSMs

KMIP

IBM Guardium

Imperva DAM

S-Tap

FortiSIEM

Safetica

Heimdal

Microsoft Defender

WAF

IPS/IDS

Nessus

BurpSuite

Nmap

Kali Linux

Azure Security

Office 365

VMware

Linux

Active Directory

IAM

Power BI

Job description

We are seeking an experienced Data Security Engineer with 4 to 5 years of experience in designing, deploying, and maintaining enterprise data protection, encryption infrastructure, and database security solutions. The ideal candidate will possess deep hands‑on expertise in Thales CipherTrust Manager, IBM Guardium/Imperva DAM & FAM, key management, and ISO27001 compliance framework implementations. This role is responsible for securing critical data assets across multi‑site infrastructure, supporting PCI DSS and GDPR audits, and configuring robust perimeter and endpoint security controls.

Key Responsibilities

• Data Encryption & Key Management: Deploy, configure, and maintain Thales CipherTrust Manager (CM), Transparent Data Encryption (TDE), CipherTrust Application Data Protection (CAKM), CipherTrust Transparent Encryption (CTE), and Hardware Security Modules (HSMs) using KMIP protocols across enterprise sites.
• Database & File Monitoring: Administer IBM Guardium and Imperva Database Activity Monitoring (DAM) and File Activity Monitoring (FAM), including S‑Tap agent installations, collector configurations, and policy enforcement.
• Compliance & Governance: Implement and lead ISO27001 control frameworks, conduct risk assessments, and prepare evidence to support PCI DSS, GDPR, and statutory financial compliance audits.
• Endpoint & Data Loss Prevention: Manage Data Loss Prevention (DLP) tools like Safetica, alongside endpoint protection solutions (Heimdal, Microsoft Defender), ensuring policy compliance across corporate devices.
• Security Operations & Monitoring: Monitor SIEM platforms (FortiSIEM), analyze EDR/DLP alerts, perform triage, and drive rapid incident response and vulnerability patch management.
• Network & Perimeter Security: Configure and maintain WAF, IPS/IDS, Active Directory, firewalls, and IPSec VPN tunnels to secure enterprise perimeter connectivity.
• Vulnerability Assessment: Conduct security posture evaluations, vulnerability assessments, and red team testing using tools such as Nessus, BurpSuite, Nmap, and Kali Linux.
• Cross-Functional Collaboration: Partner with network, cloud, and infrastructure teams to design encryption policies, deliver technical security demonstrations, and maintain solution stability.

Required Technical Skills

• Encryption & Key Management: Thales CipherTrust Manager (CM), TDE, CAKM, CTE, HSMs, KMIP.
• Database Security: IBM Guardium (DAM/FAM), Imperva DAM, S‑Tap agent deployment, Guardium policy creation.
• Security & Network Tools: FortiSIEM, Safetica DLP, Heimdal, Microsoft Defender, Firewalls, VPN config, WAF, IPS/IDS.
• Assessment & Evaluation: Nessus, BurpSuite, Nmap, Netcat, Kali Linux.
• Platforms & Systems: Azure Security, Office 365, VMware, Linux, Active Directory, IAM, Power BI.

Qualifications & Certifications

• Education: Bachelor’s Degree in Electrical Engineering, Computer Science, Information Technology, or a related field.
• Experience: Minimum 4 to 5 years of proven experience in IT data security, encryption, and compliance governance roles.

Required / Preferred Certifications

• CipherTrust Data Security Professional (Thales)
• ISO 27001 Lead Implementer
• CompTIA Security+ / CompTIA Network+
• Certified Ethical Hacker (CEH)
• Certified Information Systems Auditor (CISA) or Microsoft MD‑100

Preferred Capabilities

• Hands‑on experience executing security operations across regulated multi‑site financial or payment environments.
• Strong knowledge of Business Continuity Planning (BCP) and Disaster Recovery Planning (DRP) workflows.
• Valid UAE driving license and ability to collaborate across cross‑functional enterprise IT teams.

Skills: security,data security,database