Network & Security Engineer

gruve; Dubai; On-site; AED 320,000 - 520,000; Full time

Job summary

Gruve in Dubai seeks a Senior Network and Security Engineer who combines hands-on remediation with KPI governance. You will own patch time, coverage, and availability, lead complex server, virtualization, and cloud remediation, and serve as the technical escalation point for onsite and offsite engineers.

You will mentor Engineers 1 and 2, participate in CAB and change governance, ensure audit-ready evidence, and drive root-cause analysis of vulnerabilities while coordinating with clients and

Qualifications

• 6-10 years in network/security engineering with a strong vulnerability management background.
• Familiar with patching and upgrades of security infrastructure and cloud services.

Responsibilities

• Own the Customer-aligned KPI framework (Patch Time, Coverage, Availability); validate KPI calculations.
• Provide prioritisation sign-off and risk classification for high-impact findings and advise remediation approaches.
• Patch and harden security infrastructure (firewalls, NAC, IPS/IDS, routers/switches) and lead server/virtualization/cloud remediation.
• Represent the service at the client's Change Advisory Board; enforce change governance and audit-ready evidence.
• Lead aging and exception governance; document delays and risk acceptances per SLA.
• Lead root-cause analysis of vulnerabilities and drive continuous-improvement actions.
• Direct daily work allocation between onsite and offsite engineers and act as escalation point.
• Quality-assure change records and weekly/monthly client reporting packs.

Skills

Vulnerability management

Next-gen firewalls

NAC ISE

IPS/IDS

Cloud remediation

CAB governance

Mentoring

Team leadership

Education

CCNP Security

CCIE Security

PCNSE

Fortinet NSE

Cisco ISE

Qualys VMDR

CISSP

CISM

ITIL

Tools

Qualys

Palo Alto

Fortinet

Azure

Job description

About Gruve

Gruve is an innovative software services startup dedicated to transforming enterprises to AI powerhouses. We specialize in cybersecurity, customer experience, cloud infrastructure, and advanced technologies such as Large Language Models (LLMs). Our mission is to assist our customers in their business strategies utilizing their data to make more intelligent decisions. As a well-funded early-stage startup, Gruve offers a dynamic environment with strong customer and partner networks.

Position Summary

Senior engineer who both leads the service and performs hands‑on remediation on the most complex and security‑critical systems. Owns KPI/SLA governance, prioritisation and risk sign‑off, CAB representation, quality assurance, and mentoring of Engineers 1 and 2 - while personally fixing and patching network and security infrastructure (firewalls, NAC, IPS/IDS) and leading complex server, virtualization, and cloud remediation. Acts as the technical escalation point for both the onsite and offsite engineers and safeguards the integrity of the Customer‑aligned KPIs.

Key Responsibilities

• Own the Customer‑aligned KPI framework (Patch Time, Coverage, Availability); validate KPI calculation and monthly reporting accuracy.
• Provide prioritisation sign‑off and risk classification for high‑impact and critical findings; advise remediation approaches to system owners.
• Personally fix and patch security and network infrastructure - next‑gen firewalls, NAC, IPS/IDS, routers/switches - and lead complex server, virtualization, and cloud remediation.
• Represent the service at the client's Change Advisory Board; enforce change governance, rollback rigour, and audit‑ready evidence.
• Run aging and exception governance - surface stale findings weekly; document owner‑side delays and risk acceptances per the SLA/service‑credit model.
• Lead root‑cause analysis of recurring vulnerabilities and drive continuous‑improvement actions.
• Direct the daily work allocation between the onsite and offsite engineers and act as their technical escalation point.
• Quality‑assure change records, re‑scan evidence, and the weekly/monthly reporting pack before client submission.
• Mentor and develop the two engineers; maintain runbooks and cross‑training so onsite and offsite coverage is interchangeable.

Basic Qualifications

• 6-10 years in network/security engineering with a strong vulnerability management background.
• Deep hands‑on patching and upgrades of security infrastructure - next‑gen firewalls (Palo Alto / Fortinet), NAC (Cisco ISE), IPS/IDS and network devices - plus servers, virtualization, and cloud.
• Familiar with Qualys to run scans and obtain vulnerability details and reports.
• Strong networking (routing/switching, segmentation), Windows/Linux, virtualization, and cloud (Azure) awareness.
• Solid grasp of vulnerability management, threat/exploitability context, CVSS, and remediation strategy.
• ITIL change management and CAB processes; SLA/KPI governance and reporting to enterprise/government stakeholders.
• Experience leading a small delivery team across mixed onsite and remote coverage models.
• Excellent communication, leadership, mentoring, and documentation skills.

Preferred Qualifications

• Preferred the certifications in CCNP Security or CCIE Security; PCNSE (Palo Alto) or Fortinet NSE; Cisco ISE; Qualys VMDR; CISSP or CISM; ITIL.
• Leadership and ownership mindset; comfortable owning KPIs and audits for a government client; strong mentor.

Why Gruve

At Gruve, we foster a culture of innovation, collaboration, and continuous learning. We are committed to building a diverse and inclusive workplace where everyone can thrive and contribute their best work. If you're passionate about technology and eager to make an impact, we'd love to hear from you.

Gruve is an equal opportunity employer. We welcome applicants from all backgrounds and thank all who apply; however, only those selected for an interview will be contacted.