Security Engineer - Threat Detection & IR

Confidential Company; Abu Dhabi; On-site; AED 180,000 - 280,000; Full time

Job summary

Confidential Company is seeking a cybersecurity professional to monitor, detect, and respond to threats across on-premises and cloud environments. The role covers configuring firewalls, IDS/IPS, VPNs, and endpoint protection, alongside identity and access controls and incident response.

You will perform vulnerability assessments, security audits, and risk assessments while implementing security policies and best practices.

Qualifications

• Strong understanding of networking protocols and secure design.
• Hands-on experience with multiple firewalls and security systems.
• Knowledge of SIEM solutions and log analysis.
• Experience with EDR/XDR and vulnerability tools.
• Experience securing Windows/Linux and cloud environments.
• Familiarity with cybersecurity frameworks and IAM concepts.

Responsibilities

• Monitor detect investigate and respond to cybersecurity threats and incidents.
• Configure manage and maintain firewalls, IDS/IPS, VPNs, and endpoint protection.
• Conduct vulnerability assessments, security audits and risk assessments.
• Implement and maintain security policies, procedures and best practices.
• Coordinate penetration testing and remediation activities.
• Investigate incidents and implement preventive measures.
• Support disaster recovery, backup and business continuity planning.
• Ensure compliance with regulations and company policies.
• Conduct cybersecurity awareness sessions for employees.

Skills

Networking basics

Threat detection

Incident response

Security frameworks

Cloud security

Identity and access

Scripting basics

Tools

Fortinet

Palo Alto

Cisco ASA/Firepower

Microsoft Sentinel

Splunk

IBM QRadar

Nessus

Qualys

OpenVAS

Windows Server

Linux

Active Directory

Microsoft 365

Azure

AWS

PowerShell

Python

Bash

Job description

Confidential Company is seeking a cybersecurity professional to monitor, detect, and respond to threats across on-premises and cloud environments. The role covers configuring firewalls, IDS/IPS, VPNs, and endpoint protection, alongside identity and access controls and incident response.

You will perform vulnerability assessments, security audits, and risk assessments while implementing security policies and best practices.