Information Security Engineer — Cloud, DevSecOps

Dicetek UAE; Dubai; On-site; AED 180,000 - 280,000; Full time

Job summary

Dicetek UAE seeks an Information Security Engineer for a Government Project in Dubai, focusing on strengthening cybersecurity across enterprise infrastructure, cloud, containers, and DevSecOps pipelines. The role requires conducting complex security assessments, enforcing compliance, and guiding secure digital transformation within mission-critical systems.

Responsibilities include security reviews, vulnerability assessments, IAM improvements, and governance across Azure, AWS, GCP, and OCI

Qualifications

• Experience performing enterprise infrastructure security assessments.
• Hands-on security of databases (Oracle, SQL Server, PostgreSQL, MySQL, MongoDB).
• Strong IAM controls incl. AD, LDAP, RBAC, PAM.
• Proficiency in container security across Kubernetes/OpenShift/Docker.
• Experience in CI/CD security & DevSecOps.
• Knowledge of SAST/DAST/SCA and software supply chain security.
• Cloud security across Azure, AWS, GCP, OCI.
• Experience with Microsoft 365 security & Purview.
• Awareness of AI/ML security concepts & governance.
• Knowledge of GDPR, UAE PDPL, CBUAE, PCI DSS & ISO 27001.

Responsibilities

• Assess infrastructure security across servers, networks, DBs and cloud.
• Review hardening for Oracle, SQL Server, PostgreSQL, MySQL, MongoDB, IIS, Tomcat, JBoss.
• Evaluate CIS/NIST/ISO 27001 compliance.
• Strengthen IAM controls and privileged access.
• Perform container security assessments (Docker, Kubernetes, OpenShift).
• Review container images, RBAC and network segmentation.
• Evaluate CI/CD security in Jenkins, GitLab CI/CD, GitHub Actions.
• Validate SAST/DAST/SCA and secrets management.
• Assess security in Azure, AWS, GCP, OCI.
• Support Microsoft 365 security, Azure security and encryption controls.
• Engage in AI security assessments and API security reviews.
• Conduct risk assessments, vulnerability analysis, remediation & reporting.
• Collaborate across teams to implement security recommendations.
• Support regulatory, audit and governance requirements.
• Manage security projects and vendor engagements.

Skills

Infrastructure security assessments

Database security (Oracle, SQL Server,

IAM & Access Management

Container security (Kubernetes, OpenI

CI/CD security & DevSecOps

SAST/DAST/SCA

Cloud security (Azure,AWS,GCP,OCI)

M365/Azure security & Purview

AI security concepts

Regulatory compliance (GDPR UAE PDPL,

Risk management & vendor mgmt

Tools

Trivy

Anchore

Clair

Falco

Aqua Security

Prisma Cloud

Sysdig

Job description

Dicetek UAE seeks an Information Security Engineer for a Government Project in Dubai, focusing on strengthening cybersecurity across enterprise infrastructure, cloud, containers, and DevSecOps pipelines. The role requires conducting complex security assessments, enforcing compliance, and guiding secure digital transformation within mission-critical systems.

Responsibilities include security reviews, vulnerability assessments, IAM improvements, and governance across Azure, AWS, GCP, and OCI