Information Security Systems Engineer

VaporVM; Dubai; On-site; AED 250,000 - 380,000; Full time

Job summary

VaporVM Ltd. in Dubai seeks an Information Security Systems Engineer to own the day‑to‑day engineering and tuning of core security platforms, including Microsoft 365 E5 workloads, DLP, PAM, WAF, and Zero Trust access controls.

The role provides hands‑on security analysis and threat detection support, serving as the technical backbone of the security function. The candidate will translate security policy into working controls, collaborate with business stakeholders, and continuously improve

Qualifications

• Bachelor's degree in information technology, computer science, cybersecurity, or a related field.

Responsibilities

• Administer and tune Microsoft 365 E5 security stack across Defender, Purview, and Entra ID.
• Maintain secure baselines across Exchange Online, SharePoint, Teams, and OneDrive.
• Monitor and respond to Defender XDR and Sentinel alerts, including threat hunting and tuning.
• Design, deploy, and tune DLP policies across endpoints, email, cloud apps, and on‑premises repositories.
• Investigate DLP incidents and report on data exfiltration risk trends.
• Administer and tune PAM platforms (e.g., CyberArk) including vaulting, rotation, and just‑in‑time access.
• Manage WAF policies (Imperva) to protect web apps and APIs; analyze traffic for false positives.
• Support firewall rule management, network segmentation, and secure remote access.
• Implement and maintain Conditional Access policies as part of Zero Trust posture.
• Support SASE/proxy platforms for user and application access control; manage MFA and access certification workflows.
• Perform day‑to‑day monitoring, log analysis, and triage of alerts across SIEM.
• Support vulnerability scanning, patch validation, and remediation tracking.
• Document security architecture, configurations, and SOPs.
• Automate security operations using PowerShell, KQL, Python.
• Support audit evidence collection for ISO 27001 and other standards.

Skills

Microsoft 365 E5 security workloads

SIEM

PowerShell

Python

Zero Trust

DLP

Education

Bachelor's degree in IT / CS / Cybersecurity

Tools

Microsoft 365 Defender

Purview

Entra ID

CyberArk PAM

Imperva WAF

Sentinel

KQL

Python

Job description

The Information Security Systems Engineer is responsible for the day-to-day engineering, administration, and continuous improvement of the organization’s core security platforms. This role owns the technical implementation and tuning of Microsoft 365 E5 security workloads, data loss prevention, privileged access management, web application firewall, and Zero Trust access controls, and provides hands‑on security analysis and threat detection support. The role is the technical backbone of the security function, translating security policy and strategy into working, well‑tuned controls.

Key Responsibilities

• Administer and tune the Microsoft 365 E5 security stack: Defender (Endpoint, Office 365, Identity, Cloud Apps), Purview (DLP, Information Protection, Insider Risk), and Entra ID (Conditional Access, Identity Protection, PIM).
• Maintain secure configuration baselines across Exchange Online, SharePoint, Teams, and OneDrive.
• Monitor and respond to alerts in Defender XDR and Sentinel, including threat hunting and tuning.
• Design, deploy, and tune DLP policies across endpoint, email, cloud apps, and on-premises repositories, and maintain data classification and sensitivity labeling in partnership with business stakeholders.
• Investigate DLP incidents and report on data exfiltration risk trends.
• Administer the PAM platform (e.g., CyberArk, Delinia): vaulting, session isolation, credential rotation, and just‑in‑time access; onboard privileged accounts and support periodic access reviews and certification.
• Administer and tune WAF policies (e.g., Imperva, beyond trust, Arcon,) to protect web applications and APIs from OWASP Top 10 threats; onboard applications and analyze blocked/allowed traffic for false positives and emerging attack patterns.
• Support firewall rule management, network segmentation, and secure remote access.
• Implement and maintain Conditional Access policies, device compliance, and continuous access evaluation as part of the organization’s Zero Trust posture.
• Support SASE/proxy platforms (e.g., Netscope, Zscaler, Cato) for user and application access control, and manage MFA, identity governance, and access certification workflows.
• Perform day‑to‑day monitoring, log analysis, and triage of alerts across SIEM and native security tooling; analyze suspicious activity, phishing reports, and endpoint detections, escalating confirmed incidents per the incident response process.
• Support vulnerability scanning, patch validation, and remediation tracking.
• Document security architecture, configurations, and SOPs for all managed platforms.
• Automate repetitive security operations tasks using scripting (PowerShell, KQL, Python).
• Support audit evidence collection and technical remediation for ISO 27001 and other compliance requirements.

Required Qualifications

• Bachelor’s degree in information technology, Computer Science, Cybersecurity, or a related field.
• 4-7 years of hands‑on experience in information security engineering or security operations.
• Demonstrated hands‑on experience administering Microsoft 365 E5 security workloads (Defender suite, Purview, Entra ID).
• Practical experience with DLP, PAM, and WAF platforms in a production enterprise environment.
• Working knowledge of Zero Trust principles and Conditional Access implementation.
• Familiarity with SIEM platforms, log analysis, and security incident triage.
• Scripting/automation experience (PowerShell, KQL, Python) is a strong advantage.

Preferred Certifications

• Microsoft Certified: Security Operations Analyst Associate (SC-200)
• Microsoft Certified: Identity and Access Administrator Associate (SC-300)
• Microsoft Certified: Information Protection and Compliance Administrator Associate (SC-400)
• CompTIA Security+ or equivalent foundational security certification
• Vendor certifications for PAM/WAF platforms in use (e.g., CyberArk, Imperva), advantageous
• CEH or GIAC certifications, advantageous

Key Skills and Competencies

• Strong technical troubleshooting and analytical skills, with attention to detail in policy/rule tuning.
• Ability to work independently on complex technical configurations while following change management processes.
• Clear technical documentation and reporting skills.
• Collaborative mindset for working across IT infrastructure, application, and business teams.
• Ability to prioritize and respond effectively during active security incident