Senior InfoSec Operations & Policy Engineer

CPX; Abu Dhabi; On-site; AED 350,000 - 600,000; Full time

Job summary

CPX in Abu Dhabi seeks an experienced information security professional to lead the operation and lifecycle management of security platforms. You will design and tune data protection, PAM, endpoint/XDR and network-security policies, monitor health, and drive incident containment and recovery.

The role requires mentoring junior engineers, maintaining audit-ready documentation, and coordinating with ITSM and SIEM for integrated security workflows. Strong communication and leadership are essential.

Qualifications

• 10+ years of information security, security engineering or security operations experience.
• Deep hands-on experience in at least two primary domains: DLP/information protection, PAM, endpoint/XDR, deception or IDS/IPS; working exposure to the remaining domains is preferred.
• Experience designing and tuning policies, classifiers, detection logic, thresholds, exceptions and response actions.
• Experience with security integrations, APIs, event forwarding, SIEM, ITSM and incident workflows.
• Strong understanding of least privilege, data classification, endpoint telemetry and network-security controls.
• Ability to troubleshoot platform, connector, agent, sensor and event-ingestion issues.
• Strong documentation, reporting, stakeholder-management and mentoring skills.

Responsibilities

• Lead day-to-day operation, administration and lifecycle management of assigned information security platforms.
• Design, implement, test and tune data loss prevention, information protection, access-control, endpoint, detection and network-security policies.
• Monitor platform availability, agent and sensor health, policy deployment, event ingestion, integration status, capacity and licensing dependencies.
• Investigate security alerts and service issues; coordinate containment, recovery, escalation and root-cause analysis.
• Maintain privileged-access controls, including account onboarding, credential governance, session monitoring, access reviews and emergency-access controls.
• Maintain endpoint and XDR coverage, validate telemetry, investigate events and coordinate approved response actions.
• Operate deception, intrusion-detection and intrusion-prevention controls; tune policies and exceptions.
• Integrate security telemetry with SIEM, ITSM and approved monitoring or case-management services.
• Own technology changes through impact assessment, testing, approval, implementation, rollback planning and validation.
• Maintain SOPs, runbooks, architecture records, baselines, inventories, access matrices and recovery procedures.
• Produce reporting covering coverage, availability, incidents, exceptions, risks, backlogs and remediation.
• Support audits, risk assessments and closure of technology findings.
• Mentor supporting engineers and ensure knowledge transfer and backup readiness.
• Provide first-level backup coverage for database activity monitoring and API security monitoring.

Skills

Security engineering

Policy design

SIEM

ITSM

Incident response

Mentoring

Documentation

Least privilege

Endpoint telemetry

DLP

Education

Bachelor's degree in Cybersecurity

CISSP / CISM preferred

ITIL awareness / IT service management beneficial

Job description

CPX in Abu Dhabi seeks an experienced information security professional to lead the operation and lifecycle management of security platforms. You will design and tune data protection, PAM, endpoint/XDR and network-security policies, monitor health, and drive incident containment and recovery.

The role requires mentoring junior engineers, maintaining audit-ready documentation, and coordinating with ITSM and SIEM for integrated security workflows. Strong communication and leadership are essential.