Lead Cyber Security Engineer: Hands-On SOC & Compliance

Dubai Insurance Co.; Dubai; On-site; AED 450,000 - 750,000; Full time

Job summary

Dubai Insurance Co. is seeking a hands-on Technical Security Lead to build, run, and test security controls and to manage compliance for a CBUAE-regulated insurer. About 70% focused on technical work and 30% on proving compliance with evidence from your own work.

You’ll run security operations for an in-house SOC, own core controls end-to-end, and lead VAPT and audits to close gaps with evidence for the Board.

Qualifications

• 8–12 years of hands-on cyber security engineering or operations experience.
• Experience managing outsourced SOC, leading incidents, VAPT and audit findings.
• ISO 27001 implementation or audit experience.
• Direct experience with UAE regulators: CBUAE, UAE IA, DoH/ADHICS or DHA.
• At least one hands-on technical certification (OSCP, GCIH, GCIA, GCFA, GPEN, AZ-500, or vendor cert).
• Scripting in PowerShell or Python for automation.

Responsibilities

• Run security operations as in-house owner of outsourced SOC; develop detections and lead incidents.
• Own core controls hands-on: DLP, MDM, patching, vulnerability management.
• Set security requirements for vendors and sign-off before go-live.
• Scope and commission VAPT; reproduce findings and close on evidence.
• Hardening of endpoints, cloud, identity, PAM, zero trust, firewall/WAF reviews.
• Lead GRC and reporting with ISO 27001, UAE regs; produce monthly metrics and quarterly risk reports.

Skills

SOC management

Incident response

VAPT

Vulnerability management

ISO 27001

UAE regulator experience

Technical certifications

PowerShell/Python scripting

Bachelor's degree

Education

Bachelor's degree in Computer Science, Information Security, Engineering or related field

Job description

Dubai Insurance Co. is seeking a hands-on Technical Security Lead to build, run, and test security controls and to manage compliance for a CBUAE-regulated insurer. About 70% focused on technical work and 30% on proving compliance with evidence from your own work.

You’ll run security operations for an in-house SOC, own core controls end-to-end, and lead VAPT and audits to close gaps with evidence for the Board.