SecOps Engineer

Astra Tech; Abu Dhabi; On-site; AED 180,000 - 300,000; Full time

Job summary

Astra Tech Group is seeking a detail-oriented SecOps Engineer to join our security team in Abu Dhabi. You will support and enhance security operations and engineering capabilities, implementing, maintaining, and optimizing key security frameworks, controls, and tools to safeguard our infrastructure, applications, and data assets.

You will work across Azure cloud security, access management, DPIA, GDPR compliance, WAF, MDC, and SIEM integrations while collaborating with developers to remediate

Qualifications

• Bachelor's degree in Computer Science, Information Security, or a related field.
• 3–4 years of hands‑on experience in information security operations or engineering.
• Familiar with DevSecOps security, SAST, application security, API security and cloud operation.
• Familiar with GDPR, ISO 27001, NIST, OWASP, PCI DSS.
• Exposure to cloud security tooling, preferably Microsoft Defender for Cloud and Azure ecosystem.
• Experience with ITSM platforms (e.g., Freshworks, Jira Service Management) and WAF/SOC tools.

Responsibilities

• Implement and maintain security frameworks for building and deploying new applications, including third-party risk assessments, access management, and least privilege reviews.
• Conduct API and API key security assessment.
• Monitor and review WAF, SOC integrations, and Cloud security tooling (MDC).
• Perform security testing on login portals to ensure strong authentication controls are implemented and remediate gaps.
• Review and enforce secrets management practices using Key Vault solutions.
• Prepare security reports, trackers, and documentation.
• Collaborate with internal teams to integrate security controls into infrastructure and applications.

Skills

DevSecOps security

SAST

Application security

API security

Cloud operations

Authentication mechanisms

Security frameworks awareness

Threat monitoring

Security reporting

Education

Bachelor's degree in Computer Science or Information Security

Tools

Jira Service Management

Freshworks

Azure Defender for Cloud

Azure Key Vault

WAF

Microsoft Office (Excel, Word)

Job description

Job Summary

We are looking for a detail-oriented and proactive SecOps Engineer to join our security team, responsible for supporting and enhancing the organization’s security operations and engineering capabilities. This role will focus on implementing, maintaining, and optimizing key security frameworks, controls, and tools to safeguard the company’s infrastructure, applications, and data assets.

Responsibilities

• Implement and maintain security frameworks for building and deploying new applications, including third-party risk assessments, access management, and periodic access reviews to enforce the principle of least privilege.
• Conduct API and API key security assessment.
• Skilled for Azure Cloud to Hands on, troubleshoot and evaluate cloud security capabilities on your own.
• Conduct GDPR DPIA assessment, security compliance assessment, permission management, attack surface security assessment.
• Review and approve change requests raised in support of development teams, such as network port configurations and DNS requests, against defined protocols to ensure a secure public DNS footprint.
• Monitor and review the status of Web Application Firewalls (WAF), Security Operations Center (SOC) integrations, and Microsoft Defender for Cloud (MDC), and follow up on alerts and recommendations.
• Perform security testing on login portals to ensure strong authentication controls (e.g., MFA, password policies, account lockout, session management) are implemented, and work with developers to remediate gaps and enhance portal security.
• Review and enforce secrets management practices, ensuring keys, certificates, and credentials are securely stored, rotated, and accessed through Key Vault solutions (e.g., Azure Key Vault).
• Prepare security reports, trackers, access review records, and documentation using Microsoft Office tools (Excel, Word, PowerPoint).
• Collaborate with internal teams to ensure security controls are effectively integrated into infrastructure and applications.

Requirements

• Bachelor's degree in Computer Science, Information Security, or a related field.
• 3–4 years of hands‑on experience in information security operations or engineering.
• Familiar with Devsecops security, SAST, application security, API security and cloud operation.
• Familiar with VAPT, GDPR, Azure cloud operations hands on technology.
• Familiarity with security frameworks and standards such as ISO 27001, NIST, OWASP, and PCI DSS.
• Working knowledge of access control systems, DNS/network configurations, and application security principles.
• Experience with ITSM platforms (e.g., Freshworks, Jira Service Management) and WAF/SOC tools.
• Hands‑on exposure to cloud security tooling, preferably Microsoft Defender for Cloud and the Azure ecosystem.
• Understanding of authentication mechanisms (MFA, SSO, OAuth/OIDC) and common login‑related vulnerabilities (OWASP Top 10).
• Knowledge of API security, secrets management, and Key Vault solutions.
• Proficiency in Microsoft Office, particularly Excel (data analysis, pivot tables) and Word for reporting and documentation.
• Strong analytical and problem‑solving skills with attention to detail.