Information Security Engineer

10-XER; Dubai; On-site; AED 180,000 - 240,000; Full time

Benefits offered by this job

Competitive salary

Professional development

Exposure to modern security tools

Collaborative environment

Security improvements initiatives

Job summary

10-XER in Dubai is seeking a skilled Information Security Engineer to protect IT infrastructure, apps, networks and data from security threats. You will identify vulnerabilities, implement controls, monitor threats and ensure policy compliance.

The role collaborates with software developers and IT teams, performs risk assessments and security testing, and contributes to security governance and incident response.

Qualifications

• Bachelor's degree in Computer Science, Cybersecurity, IT, or related field or equivalent experience.
• 1–3 years of information security experience.
• Strong understanding of networking fundamentals (TCP/IP, DNS, VPNs, firewalls).
• Knowledge of Windows and Linux security.
• Familiarity with vulnerability assessment and security testing tools (Nessus, Nmap, Burp Suite, OWASP ZAP).
• Knowledge of OWASP Top 10, phishing, malware and access control principles.
• Familiarity with IAM, MFA, encryption and security incident handling.

Responsibilities

• Implement, maintain and improve information security controls across systems, networks, apps, and infrastructure.
• Identify vulnerabilities via assessments, reviews and authorized pen tests.
• Monitor security alerts, investigate incidents and assist in response.
• Configure and maintain security tools (firewalls, endpoint protection, IDS/IPS).
• Perform security assessments of applications, APIs, servers, and networks.
• Assist in IAM, access management and MFA.
• Support patch management and vulnerability remediation.
• Develop and maintain information security policies and technical docs.
• Support risk assessments, audits and compliance.
• Collaborate with developers and IT teams to address security issues.

Skills

Networking fundamentals

Vulnerability assessment

Threat monitoring

Security incident handling

Analytical thinking

Communication skills

Education

Bachelor's degree in Computer Science / Cybersecurity

Tools

Nessus

Nmap

Burp Suite

OWASP ZAP

Microsoft Sentinel

Splunk

QRadar

Job description

Job Summary

We are looking for a skilled and motivated Information Security Engineer to protect the organization's IT infrastructure, applications, networks, and sensitive data from security threats. The ideal candidate will help identify vulnerabilities, implement security controls, monitor potential threats, and ensure compliance with information security policies and best practices.

Key Responsibilities

• Implement, maintain, and improve information security controls across systems, networks, applications, and infrastructure.
• Identify security vulnerabilities through vulnerability assessments, security reviews, and authorized penetration testing.
• Monitor security alerts, investigate suspicious activities, and assist in responding to security incidents.
• Configure and maintain security tools, including firewalls, endpoint protection, antivirus, and intrusion detection/prevention systems.
• Perform security assessments of applications, APIs, servers, and network infrastructure.
• Assist in access control management, identity and access management (IAM), and multi-factor authentication.
• Support secure system configurations, patch management, and vulnerability remediation.
• Help develop and maintain information security policies, procedures, and technical documentation.
• Support risk assessments, security audits, and compliance requirements.
• Collaborate with software developers, system administrators, and IT teams to address security issues.
• Promote security awareness and follow secure development and operational practices.
• Stay updated on emerging cybersecurity threats, vulnerabilities, and security technologies.

Required Qualifications

• Bachelor's degree in Computer Science, Software Engineering, Cybersecurity, Information Technology, or a related field, or equivalent practical experience.
• 1–3 years of relevant experience in information security, cybersecurity, IT security, or a related role.
• Understanding of networking fundamentals, including TCP/IP, DNS, VPNs, and firewalls.
• Knowledge of operating system security, particularly Windows and Linux.
• Familiarity with vulnerability assessment and security testing tools such as Nessus, Nmap, Burp Suite, or OWASP ZAP.
• Understanding of common security risks, including the OWASP Top 10, phishing, malware, and unauthorized access.
• Knowledge of authentication, authorization, encryption, and access control principles.
• Familiarity with security incident handling, log analysis, and vulnerability remediation.
• Strong analytical, troubleshooting, and problem-solving skills.
• Good communication skills and the ability to work effectively with technical teams.

Preferred Qualifications

• Relevant certifications such as CompTIA Security+, Certified Ethical Hacker (CEH), or ISO/IEC 27001 Foundation.
• Familiarity with SIEM tools such as Microsoft Sentinel, Splunk, or QRadar.
• Basic understanding of cloud security across AWS, Microsoft Azure, or Google Cloud.
• Knowledge of security frameworks such as ISO 27001, NIST Cybersecurity Framework, or CIS Controls.
• Experience with security automation or scripting using Python, PowerShell, or Bash.

What We Offer

• Competitive salary based on skills and experience.
• Opportunities for professional development and technical certifications.
• Exposure to modern security tools and technologies.
• Collaborative working environment.
• Opportunities to contribute to security improvements and risk reduction.