Security Engineer - Netskope & SASE

Tanqeeb; Dubai; On-site; AED 300,000 - 540,000; Full time

Job summary

Tanqeeb is seeking a highly skilled Security Engineer to design, implement, and maintain enterprise security infrastructure in the UAE. The role centers on SASE strategy using Netskope, leading a technical team managing endpoint, email, and vulnerability platforms, and providing secondary support for firewall and cloud security posture.

The candidate will drive SASE architecture, policy enforcement, and incident response across multiple security domains, collaborating with stakeholders to

Qualifications

• 7–9 years in cybersecurity engineering with 2–3 years in an L3 or leadership role.
• Bachelor’s degree in Computer Science, Cyber Security, IT, or equivalent practical experience.

Responsibilities

• Own SASE architecture deployment, configuration, and optimization of Netskope.
• Design and enforce DLP and threat-protection policies across cloud/web traffic.
• Lead security engineers for endpoint, email, and vulnerability platforms; provide L3 escalation support.
• Oversee endpoint protection administration (EPP/EDR) across multiple tools.
• Drive vulnerability lifecycle management using Qualys; ensure timely scanning and reporting.
• Manage inbound/outbound email security, routing, and phishing mitigation with Proofpoint.
• Support firewall governance and cloud security posture via AlgoSec and Prisma Cloud.

Skills

SASE

Team leadership

EDR

Vulnerability management

Email security

Policy design

Communication

Security architecture

Cloud security

Education

Bachelor’s degree in CS / Cyber Security / IT

Tools

Netskope

Trend Micro DSM

Symantec

CrowdStrike Falcon

Qualys VMDR

Proofpoint

AlgoSec

Palo Alto Prisma Cloud

Job description

Job Title: Security Engineer - Netskope & SASE

Location: UAE/Onsite

Role Type - FTE

Job Summary:

We are seeking a highly skilled L3 Information Security Engineer to design, implement, and maintain our enterprise security infrastructure. Your primary responsibility is driving our Secure Access Service Edge (SASE) strategy using Netskope. You will also lead a specialized technical team managing core endpoint, email, and vulnerability management platforms. Additionally, you will provide secondary engineering support for firewall assurance and cloud security posture management.

Key Responsibilities:

Primary Technical Engineering (SASE & Core Security):

• SASE Architecture: Own the deployment, configuration, and continuous optimization of Netskope (CASB, SWG, ZTNA).
• Policy Management: Design and enforce data loss prevention (DLP) and threat protection policies across cloud and web traffic.
• L3 Escalation Support: Serve as the highest technical escalation point for complex SASE infrastructure issues.

Team Leadership & Platform Management:

• Team Leadership: Lead and mentor a team of security engineers handling daily operations for endpoint, email, and vulnerability platforms.
• Endpoint Protection (EPP/EDR): Oversee administration and incident response across Trend Micro Deep Security Manager (DSM), Symantec Endpoint Security, and CrowdStrike Falcon.
• Vulnerability Management: Drive the enterprise vulnerability lifecycle utilizing Qualys, ensuring accurate scanning, prioritization, and reporting.
• Email Security: Manage inbound/outbound threat protection, mail routing, and phishing mitigation strategies using Proofpoint.

Secondary Technical Responsibilities:

• Firewall Assurance: Support network security auditing, compliance tracking, and policy optimization using AlgoSec.
• Cloud Security (CNAPP/CSPM): Assist in securing multi-cloud environments by monitoring alerts and compliance postures via Palo Alto Prisma Cloud.

Job Requirements:

Experience & Education

• Experience: Minimum 7–9 years in cybersecurity engineering, with at least 2–3 years in an L3 or team leadership role.
• Education: Bachelor’s degree in Computer Science, Cyber Security, Information Technology, or equivalent practical experience.

Technical Skills:

• SASE: Deep technical expertise in Netskope implementation and traffic steering.
• EDR/EPP: Hands-on mastery of CrowdStrike, Trend Micro DSM, and Symantec.
• Vulnerability & Email: Proven experience with Qualys VMDR and Proofpoint Enterprise.
• Network & Cloud Security: Solid foundational knowledge of AlgoSec and Palo Alto Prisma Cloud.
• Core Networking: Strong understanding of TCP/IP, DNS, routing, SSL/TLS decryption, and API integrations.

Soft Skills:

• Leadership: Proven ability to guide, train, and distribute workload among junior to mid-level engineers.
• Communication: Ability to translate complex technical risks into clear business language for stakeholders.

Preferred Certifications:

• Netskope Certified Cloud Security Administrator (NCCSA) / Integrator (NCCSI)
• CrowdStrike Certified Falcon Administrator (CCFA) or Analyst (CCFA)
• Qualys Certified Specialist
• CISSP, CISM, or CEH