Security Manager

Nebarex; Dubai; On-site; AED 120,000 - 200,000; Full time

Job summary

A technology company in Dubai is seeking a Security & Compliance Engineer responsible for securing cloud environments and managing device security. The ideal candidate will have proven experience in M365 security administration and Azure AD configurations, as well as knowledge of ISO 27001 and SOC 2 Type II frameworks. This role emphasizes continuous improvement in security practices and policies.

Qualifications

• Proven experience in M365 security administration.
• Hands-on experience with Azure AD security configurations.
• Understanding of ISO 27001 and/or SOC 2 Type II frameworks.

Responsibilities

• Configure and monitor M365 security posture.
• Support and enhance Azure security controls.
• Administer Entra ID including Conditional Access Policies.
• Manage Intune for device compliance and endpoint protection.
• Collaborate to implement and maintain security policies.
• Monitor security dashboards and respond to incidents.

Skills

M365 security administration

Azure AD security configurations

Identity and access management

Cloud security

Endpoint security principles

Tools

PowerShell

KQL

Azure Logic Apps

Job description

Company Description

Nebarex is more than software; it's a system designed for speed, clarity, and control. Built for the real world of logistics, it connects your operations into a single workflow where every actor is visible, every delay is escalated, and every step moves your business forward.

Role Overview

We are seeking a Security & Compliance Engineer with a strong background in
Microsoft 365 (M365) security and a solid understanding of Azure security
services. The ideal candidate will be responsible for securing our cloud
environments, managing device security for Windows and macOS, and
contributing to enterprise-wide compliance efforts aligned with ISO 27001 and
SOC 2 Type II frameworks.

You’ll play a critical role in implementing, monitoring, and improving security
controls across M365, Entra ID (Azure AD), Intune, and related technologies,
while also helping to enforce policies and procedures that align with industry
best practices.

Key Responsibilities

• Microsoft 365 Security (Mandatory)
  Configure, monitor, and improve M365 security posture across multiple
  tenants, including Defender for Office 365, Defender for Endpoint, Data Loss
  Prevention (DLP) and Sensitivity Labels.
  Manage Microsoft Purview Compliance Center configurations and alerts.
  Conduct regular security assessments and incident response activities within
  the M365 environment.
• Azure Security (Preferred)
  Support and enhance Azure security controls, including Microsoft Defender
  for Cloud, Azure Security Center, Privileged Identity Management (PIM),
  and Key Vault.
  Review and harden Azure role-based access control (RBAC) and network
  security configurations.
• Identity and Access Management
  Administer Entra ID (formerly Azure AD), including Conditional Access Policies,
  Identity Protection, SSO configurations, and MFA enforcement.
• Device Security & Management
  Manage Intune for Windows and macOS devices, focusing on compliance
  policies, endpoint protection, enrollment, and patch management.
  Maintain device hygiene, endpoint threat protection, and mobile device security
  across the organization.
• Security Policies & Compliance Support
  Collaborate with stakeholders to implement and maintain security policies,
  standards, and procedures.
  Assist with risk assessments, audit preparations, and evidence gathering for
  ISO 27001 and SOC 2 Type II compliance.
  Support vendor risk management, data protection, and incident response
  planning.
• Monitoring, Reporting & Improvement
  Monitor security dashboards and respond to alerts, incidents, and anomalies.
  Conduct root cause analysis and remediation of security events.
  Continuously assess and improve security configurations and baseline
  policies.

Role Requirements

• Proven experience in M365 security administration (Defender, DLP,
  Compliance Center, Intune).
• Hands‑on experience with Entra ID / Azure AD security configurations,
  Windows and macOS device management and security hardening.
• Understanding of ISO 27001 and/or SOC 2 Type II frameworks and compliance processes.
• Strong knowledge of identity and access management, cloud security, and
  endpoint security principles.

Preferred Skills

• Scripting/automation with PowerShell, KQL, or Azure Logic Apps.
• Exposure to incident response, compliance automation tools, and security operations.

Preferred Certifications

Microsoft Certified

• Security Operations Analyst Associate (SC-200)
• Identity and Access Administrator Associate (SC-300)
• Microsoft 365 Security Administrator Associate (MS-500)
• Azure Security Engineer Associate (AZ-500)

Advantageous

• ISC² Certifications such as SSCP, CISSP, or CCSP (not mandatory, but valued).

Key Attributes

• Strong analytical and problem‑solving skills.
• Proactive in identifying security improvements and bringing initiatives to
  the table, with a focus on seeing them through to proper implementation.
• Ability to work independently and as part of a distributed team.
• Excellent verbal and written communication skills.
• Detail‑oriented with a commitment to security best practices and
  continuous improvement.