Endpoint and Cloud Security Specialist

DiceTek UAE; Dubai; In loco; AED 180.000 - 320.000; Tempo pieno

Descrizione del lavoro

Dicetek LLC is seeking an Endpoint and Cloud Security Specialist for a full-time, on-site role in Dubai, United Arab Emirates. The position focuses on securing enterprise endpoints, cloud platforms, containers, CI/CD pipelines and AI systems through security architecture reviews and remediation activities.

The successful candidate will work with IT, governance and compliance teams to assess risks and deliver security projects, with hands-on expertise in Microsoft 365, Azure security, container

Competenze

• Hands-on expertise in Microsoft 365 and Azure security
• Infrastructure hardening and cloud security posture management
• Container protection, CI/CD security and DevSecOps practices

Mansioni

• Develop, implement and enforce endpoint security policies and controls.
• Lead security initiatives from design through testing and documentation.
• Collaborate with GRC teams to address audit findings and remediation actions.
• Assess and secure Microsoft 365, Azure, container environments and cloud deployments.
• Review CIS/NIST guidance and regulatory requirements for infrastructure security.

Descrizione del lavoro

Endpoint and Cloud Security Specialist Job Snapshot - Role: Endpoint and Cloud Security Specialist - Location: Dubai, United Arab Emirates - Industry: I T and Services - Function: Computer-Network Security - Experience: Not specified - Job Type: Full Time - Work Arrangement: On-site

Position Overview

Dicetek LLC is seeking an Endpoint and Cloud Security Specialist for a full-time, on-site opportunity in Dubai, United Arab Emirates.

The position involves securing enterprise endpoints, cloud platforms, infrastructure, container environments, CI/CD pipelines and AI systems through security architecture reviews, technical assessments, control implementation and remediation activities.

The role requires hands-on expertise in Microsoft 365 and Azure security, infrastructure hardening, cloud security posture management, container protection and DevSecOps practices.

The successful candidate will work with IT infrastructure teams, governance and compliance functions, vendors and business stakeholders to assess security risks, implement protective measures and deliver security projects.

Job Details

• Country: United Arab Emirates
• City: Dubai
• Industry: I T and Services
• Function: Computer-Network Security
• Salary: Not disclosed
• Gender: No Preference
• Candidate Nationality: Not specified
• Job Type: Full Time
• Work Arrangement: On-site

Endpoint Security and Microsoft Cloud Protection

• Develop, implement and enforce endpoint security policies, procedures and technical controls.
• Provide IT and network teams with guidance on endpoint protection, secure configurations and security best practices.
• Deploy and manage endpoint protection measures against malware, ransomware and other security threats.
• Lead security initiatives from solution design and implementation through testing and technical documentation.
• Design, implement and troubleshoot security and compliance solutions across Microsoft 365 and Microsoft Azure.
• Develop integrations involving Microsoft 365 security and compliance capabilities.
• Conduct proof-of-concept evaluations to assess new security technologies and their suitability for enterprise environments.
• Implement data loss prevention controls using Microsoft Purview and encryption solutions for cloud-hosted and on-premises information.
• Collaborate with Governance, Risk and Compliance (GRC) teams to address audit observations, implement corrective actions and resolve security control gaps.

Infrastructure Security Assessments

Perform technical security reviews across enterprise infrastructure, including servers, databases, applications, networks, middleware, virtualization platforms and cloud environments.

Key Assessment Activities

• Review database security configurations for Microsoft SQL Server, Oracle, PostgreSQL, MySQL and MongoDB.
• Assess web and application server security for Microsoft IIS, Apache Tomcat and JBoss.
• Identify infrastructure vulnerabilities, insecure configurations and weaknesses in existing security controls.
• Evaluate technical configurations against CIS Benchmarks, NIST guidance and relevant vendor security standards.
• Assess identity and access management controls involving Active Directory, LDAP, role-based access control (RBAC), privileged access management (PAM), authentication and identity lifecycle processes.
• Review infrastructure security controls against applicable regulatory and compliance requirements, including GDPR, UAE Personal Data Protection Law (PDPL), Central Bank of the UAE (CBUAE) requirements, PCI DSS, ISO 27001 and Information Security Regulation (ISR).

Container and Kubernetes Security

• Conduct security assessments of Docker, Podman, CRI-O, Kubernetes and OpenShift environments to identify vulnerabilities and configuration weaknesses.
• Review container image security, including minimal base image selection, image signature verification and trusted registry controls.
• Examine Kubernetes manifests, Helm charts, RBAC permissions, admission controls and network security policies.
• Evaluate API access restrictions, Kubernetes service accounts and secrets management mechanisms.
• Assess container network segmentation and security controls implemented through Kubernetes network policies.
• Review service mesh security configurations involving Istio and Linkerd.
• Evaluate TLS and mutual TLS (mTLS) protections for communications between pods and services.
• Assess container supply chain security using scanning technologies such as Trivy, Anchore and Clair, including Software Bill of Materials (SBOM) validation.
• Review container runtime monitoring and threat detection capabilities using Falco, Aqua, Prisma Cloud and Sysdig.

CI/CD Pipeline and DevSecOps Security

• Assess Jenkins, GitLab CI/CD and GitHub Actions environments for security vulnerabilities, misconfigurations and access control weaknesses.
• Evaluate the security of software build and deployment workflows, including artifact integrity and protection against unauthorized modifications.
• Review the implementation of security quality gates incorporating Static Application Security Testing (SAST), Dynamic Application Security Testing (DAST), Software Composition Analysis (SCA), secrets scanning and container vulnerability scanning.
• Assess CI/CD integrations with cloud platforms, source code repositories, artifact registries and container orchestration environments.
• Identify software supply chain risks, including dependency confusion, package tampering and compromised development dependencies.
• Evaluate CI/CD security logging integration with Security Information and Event Management (SIEM) platforms.
• Support forensic readiness through appropriate pipeline logging, monitoring and security evidence collection.

Multi-Cloud Security Assessments

The role includes evaluating security architecture, configurations and protective controls across Microsoft Azure, Amazon Web Services (AWS), Google Cloud Platform (GCP) and Oracle Cloud Infrastructure (OCI).

Responsibilities include:

• Conduct cloud security assessments to identify architectural weaknesses, configuration risks and control deficiencies.
• Review cloud networking, segmentation, identity management, RBAC and conditional access configurations.
• Evaluate Cloud Access Security Broker (CASB) capabilities for cloud visibility, governance, data protection and threat management.
• Assess Cloud Security Posture Management (CSPM) capabilities using platforms such as Wiz.
• Review Software-as-a-Service Security Posture Management (SSPM) solutions and associated SaaS security controls.
• Evaluate cloud data classification, encryption and data loss prevention capabilities using Microsoft Purview.
• Identify cloud security gaps and provide technical recommendations for remediation.

AI and Machine Learning Security Architecture

• Assess security throughout the AI and machine learning lifecycle, including data preparation, model development, deployment, operations and retirement.
• Review AI system architecture to identify security risks associated with trust boundaries, network segmentation, identity management and access controls.
• Evaluate API security, encryption, logging and monitoring controls within AI-enabled environments.
• Apply relevant AI risk management and governance frameworks to define security controls and assurance activities.
• Identify weaknesses in AI security architecture and recommend appropriate risk mitigation measures.

Security Project Delivery and Coordination

• Plan and execute security projects with clearly defined scope, deliverables, timelines and resource requirements.
• Coordinate project activities involving technical teams, business owners, external vendors and senior stakeholders.
• Monitor project risks, issues, dependencies and change requests throughout implementation.
• Manage communication between participating teams to support effective security solution delivery.
• Coordinate vendor activities and monitor fulfillment of contractual deliverables.
• Ensure security projects include appropriate design, implementation, testing and documentation activities.

Technical Knowledge and Security Platforms

• Endpoint protection, malware prevention and ransomware defense.
• Microsoft 365, Azure security and Microsoft Purview.
• Data loss prevention, encryption and information protection.
• Infrastructure security assessments and configuration hardening.
• SQL Server, Oracle, PostgreSQL, MySQL and MongoDB security.
• IIS, Apache Tomcat and JBoss application server security.
• Active Directory, LDAP, RBAC, PAM and identity lifecycle management.
• Docker, Podman, CRI-O, Kubernetes and OpenShift.
• Kubernetes security policies, Helm charts, Istio and Linkerd.
• Container vulnerability scanning, SBOM validation and runtime monitoring.
• Jenkins, GitLab CI/CD and GitHub Actions security.
• SAST, DAST, SCA and software supply chain security.
• Azure, AWS, GCP and OCI cloud security.
• CASB, CSPM and SSPM security assessment capabilities.
• AI and machine learning security architecture.
• CIS Benchmarks, NIST guidance and relevant security standards.
• GDPR, UAE PDPL, CBUAE, PCI DSS, ISO 27001 and ISR compliance requirements.

Security Certifications

• SC-401 - Microsoft Information Security Administrator.
• SC-900 - Microsoft Security, Compliance and Identity Fundamentals.
• CISSP - Certified Information Systems Security Professional.
• CCSK - Certificate of Cloud Security Knowledge.

Professional Capabilities

The position requires the ability to combine technical security assessment with practical solution implementation and project coordination.

Important capabilities include:

• Evaluating complex infrastructure and cloud security architectures.
• Identifying vulnerabilities, misconfigurations and weaknesses in technical controls.
• Translating assessment findings into actionable remediation recommendations.
• Implementing security protections across endpoints, cloud services and enterprise applications.
• Coordinating security improvements with infrastructure, development and GRC teams.
• Assessing containerized applications and automated software delivery environments.
• Communicating technical security risks and project requirements to stakeholders.
• Maintaining clear technical documentation and supporting security assurance activities.

Role Focus

This opportunity combines enterprise endpoint protection, Microsoft cloud security engineering, infrastructure assessment, container security, DevSecOps assurance and emerging AI security architecture. The successful candidate will contribute to securing enterprise technology environments by evaluating existing controls, identifying technical risks, supporting remediation and coordinating the implementation of security improvements across multiple platforms.