Information Security Systems Engineer

VaporVM; Dubai; On-site; AED 180,000 - 260,000; Full time

Job summary

VaporVM is seeking an Information Security Systems Engineer to own the day-to-day engineering and tuning of core security platforms. The role focuses on Microsoft 365 E5 workloads, DLP, PAM, WAF, and Zero Trust controls, delivering hands-on security analysis and threat detection support.

Responsibilities include configuring Defender, Purview, and Entra ID; maintaining Exchange/SharePoint security baselines; threat monitoring; DLP policy design; PAM management; and incident response coordination

Qualifications

• Bachelor's degree in information technology, computer science, cybersecurity, or related field.
• 4–7 years hands-on information security engineering or security operations experience.
• Hands-on admin of Microsoft 365 E5 security workloads (Defender, Purview, Entra ID).
• Practical experience with DLP, PAM, and WAF platforms in production.
• Knowledge of Zero Trust and Conditional Access concepts.
• Familiarity with SIEM, log analysis, and incident triage.
• Automation scripting experience (PowerShell, KQL, Python) is a plus.

Responsibilities

• Administer and tune Microsoft 365 E5 security stack across Defender, Purview, and Entra ID.
• Maintain secure baselines for Exchange Online, SharePoint, Teams, and OneDrive.
• Monitor Defender XDR and Sentinel; perform threat hunting and tuning.
• Design and tune DLP policies; manage data classification and labeling with stakeholders.
• Investigate DLP incidents and report data exfiltration trends.
• Administer PAM platforms; onboard privileged accounts and manage access reviews.
• Administer and tune WAF policies to protect apps and APIs from OWASP Top 10.
• Support firewall/rules, network segmentation, and secure remote access.
• Implement and maintain Zero Trust policies, conditional access, and device compliance.
• Support SASE/proxy platforms for access control and MFA; manage identity governance.
• Log analysis and incident response escalation; vulnerability scanning and remediation tracking.
• Document security architecture and SOPs; automate tasks with scripting.
• Assist with ISO 27001 and other compliance evidence and remediation.

Skills

Security engineering

Microsoft 365 E5 security

DLP

PAM (CyberArk, Delinia)

WAF management (Imperva)

Zero Trust

Scripting (PowerShell, Python, KQL)

SIEM/log analysis

Education

Bachelor's degree in IT/CS/Cybersecurity or related field

Tools

CyberArk

Imperva WAF

Defender suite

Purview

Entra ID

PIM

SASE proxies (Netskope, Zscaler, Cato)

Job description

The Information Security Systems Engineer is responsible for the day-to-day engineering, administration, and continuous improvement of the organization s core security platforms. This role owns the technical implementation and tuning of Microsoft 365 E5 security workloads, data loss prevention, privileged access management, web application firewall, and Zero Trust access controls, and provides hands-on security analysis and threat detection support. The role is the technical backbone of the security function, translating security policy and strategy into working, well-tuned controls.

Key Responsibilities

Administer and tune the Microsoft 365 E5 security stack: Defender (Endpoint, Office 365, Identity, Cloud Apps), Purview (DLP, Information Protection, Insider Risk), and Entra ID (Conditional Access, Identity Protection, PIM).

Maintain secure configuration baselines across Exchange Online, SharePoint, Teams, and OneDrive.

Monitor and respond to alerts in Defender XDR and Sentinel, including threat hunting and tuning.

Design, deploy, and tune DLP policies across endpoint, email, cloud apps, and on-premises repositories, and maintain data classification and sensitivity labeling in partnership with business stakeholders.

Investigate DLP incidents and report on data exfiltration risk trends.

Administer the PAM platform (e.g., CyberArk, Delinia): vaulting, session isolation, credential rotation, and just-in-time access; onboard privileged accounts and support periodic access reviews and certification.

Administer and tune WAF policies (e.g., Imperva, beyond trust, Arcon,) to protect web applications and APIs from OWASP Top 10 threats; onboard applications and analyze blocked/allowed traffic for false positives and emerging attack patterns.

Support firewall rule management, network segmentation, and secure remote access.

Implement and maintain Conditional Access policies, device compliance, and continuous access evaluation as part of the organization s Zero Trust posture.

Support SASE/proxy platforms (e.g., Netscope, Zscaler, Cato) for user and application access control, and manage MFA, identity governance, and access certification workflows.

Perform day-to-day monitoring, log analysis, and triage of alerts across SIEM and native security tooling; analyze suspicious activity, phishing reports, and endpoint detections, escalating confirmed incidents per the incident response process.

Support vulnerability scanning, patch validation, and remediation tracking.

Document security architecture, configurations, and SOPs for all managed platforms.

Automate repetitive security operations tasks using scripting (PowerShell, KQL, Python).

Support audit evidence collection and technical remediation for ISO 27001 and other compliance requirements.

Desired Candidate Profile

Bachelor s degree in information technology, Computer Science, Cybersecurity, or a related field.

4-7 years of hands-on experience in information security engineering or security operations.

Demonstrated hands-on experience administering Microsoft 365 E5 security workloads (Defender suite, Purview, Entra ID).

Practical experience with DLP, PAM, and WAF platforms in a production enterprise environment.

Working knowledge of Zero Trust principles and Conditional Access implementation.

Familiarity with SIEM platforms, log analysis, and security incident triage.

Scripting/automation experience (PowerShell, KQL, Python) is a strong advantage.

Preferred Certifications

Microsoft Certified: Security Operations Analyst Associate (SC-200)

Microsoft Certified: Identity and Access Administrator Associate (SC-300)

Microsoft Certified: Information Protection and Compliance Administrator Associate (SC-400)

CompTIA Security+ or equivalent foundational security certification

Vendor certifications for PAM/WAF platforms in use (e.g., CyberArk, Imperva), advantageous

CEH or GIAC certifications, advantageous

Key Skills and Competencies

Strong technical troubleshooting and analytical skills, with attention to detail in policy/rule tuning.

Ability to work independently on complex technical configurations while following change management processes.

Clear technical documentation and reporting skills.

Collaborative mindset for working across IT infrastructure, application, and business teams.

Ability to prioritize and respond effectively during active security incident