Senior Information Security Engineer

DICETEK LLC; Dubai; On-site; AED 240,000 - 360,000; Full time

Job summary

DICETEK LLC in Dubai is seeking an experienced security professional for an Endpoint & Cloud Security role on a contract basis. You will develop and enforce endpoint security policies, guide IT teams on best practices, and implement protection against malware while enabling Microsoft 365 and Azure security solutions.

You will also perform cloud and container security assessments, enforce CIS/NIST standards, and collaborate with GRC to remediate findings across databases, apps, and CI/CD

Qualifications

• Experience designing and enforcing endpoint, cloud, and container security controls.
• Ability to guide IT teams on security best practices and remediation.
• Hands-on with risk-based security assessments and governance frameworks.
• Proficiency in CIS, NIST, PCI DSS, ISO 27001 and UAE PDPL guidance.
• Experience with CI/CD security, SAST/DAST and secrets scanning.
• Knowledge of cloud security across Azure, AWS, GCP and CSPM tooling.

Responsibilities

• Develop and enforce endpoint security policies and procedures.
• Guide IT/network teams on security best practices.
• Implement and manage endpoint protection against malware/ransomware.
• Design, troubleshoot, and implement M365 & Azure security/compliance solutions.
• Build M365 security/compliance integrations.
• Conduct PoC testing for new security technologies.
• Design and implement DLP (Microsoft Purview) and encryption for cloud/on‑prem data.
• Work with GRC teams to resolve audit findings and implement remediation.
• Security assessments across databases and web/app servers against CIS/NIST.
• IAM experience: AD, LDAP, RBAC, PAM, authentication and identity lifecycle.
• Regulatory compliance: GDPR, UAE PDPL, CBUAE, PCI DSS, ISO 27001, ISR.
• Container security assessment and hardening for Docker/Kubernetes/OpenShift.
• Secure CI/CD pipelines and supply chain integrity with SBOM controls.

Skills

Endpoint security

Microsoft 365 security

Azure security

Cloud security

Container security

CIS benchmarks

NIST

PCI DSS

ISO 27001

IAM

SAST/DAST

CI/CD security

Kubernetes/OpenShift security

Tools

Trivy

Anchore

Clair

SBOM tooling

Jenkins

GitLab CI/CD

GitHub Actions

Wiz

Kubernetes

OpenShift

Job description

place Job Location Dubai (Work From Office)

work Job Type Contract

Job Description

Endpoint & Cloud Security Responsibilities

• Develop and enforce endpoint security policies and procedures.
• Guide IT/network teams on security best practices.
• Implement and manage endpoint protection against malware/ransomware.
• Design, troubleshoot, and implement Microsoft 365 & Azure security/compliance solutions.
• Build Microsoft 365 security/compliance integrations.
• Conduct PoC testing for new security technologies.
• Design and implement DLP (Microsoft Purview) and encryption for cloud/on‑prem data.
• Work with GRC teams to resolve audit findings and implement remediation.

Infrastructure Security Assessment

• Database security reviews for SQL Server, Oracle, PostgreSQL, MySQL, MongoDB.
• Web/app server security for IIS, Apache Tomcat, JBoss.
• Assess servers, networks, databases, middleware, virtualization, cloud environments.
• Review configurations against CIS Benchmarks, NIST, vendor standards.
• IAM experience: AD, LDAP, RBAC, PAM, authentication, identity lifecycle.
• Regulatory compliance: GDPR, UAE PDPL, CBUAE, PCI DSS, ISO 27001, ISR.

Container Security Assessment

• Assess Docker, Podman, CRI‑O, Kubernetes, OpenShift for vulnerabilities & misconfigurations.
• Harden container images (minimal base images, signature validation, trusted registries).
• Evaluate API access controls, service accounts, secrets management.
• Review TLS/mTLS for pod/service communications.
• Secure CI/CD supply chain (Trivy, Anchore, Clair, SBOM validation).

CI/CD Automation Security Assessment

• Assess Jenkins, GitLab CI/CD, GitHub Actions for vulnerabilities & misconfigurations.
• Secure build/deployment processes and artifact integrity.
• Enforce SAST, DAST, SCA, secrets scanning, container scanning via quality gates.
• Evaluate integrations with cloud services, repos, registries, container platforms.
• Assess software supply chain risks (dependency confusion, tampering).
• Integrate CI/CD logs with SIEM; ensure forensic readiness.

Cloud Security Assessments

• Security assessments across Azure, AWS, GCP, OCI.
• Review cloud security architecture (networking, segmentation, identity, RBAC, conditional access).
• Evaluate CASB controls for visibility, governance, data protection, threat management.
• Assess cloud posture using CSPM tools (e.g., Wiz).
• Assess SaaS posture via SSPM platforms.

AI Security Architecture Assessment

• Review secure AI architecture (trust boundaries, segmentation, identity, API security, encryption, logging).
• Apply AI risk/governance frameworks to define controls and assurance activities.

Project Management

• Plan and execute security projects (scope, deliverables, timelines, resources).
• Communicate with technical teams, business owners, vendors, senior stakeholders.
• Manage risks, issues, dependencies, change requests.
• Coordinate vendors and ensure contractual deliverables.

Security Certifications

• SC‑401 (Microsoft Information Security Administrator)
• SC‑900 (Microsoft Security, Compliance & Identity Fundamentals)