Senior Security Analyst: AWS, ISO 27001 & SOC Lead

Alchemy; Dubai; On-site; AED 180,000 - 300,000; Full time

Job summary

Alchemy in Dubai seeks a senior security professional to operationalise an ISO 27001-aligned ISMS and lead security operations for a SaaS platform. You will coordinate with DevOps and cloud teams to implement robust controls across AWS, manage vulnerability scans with Tenable/AWS Inspector/Snyk, and ensure endpoint compliance with Jamf and Intune.

You will prepare audit evidence and drive incident response activities.

Qualifications

• Bachelor's degree in Information Security, Computer Science, or a related field or significant alternative relevant technical security industry experience.
• 5+ years of hands-on experience in technical security roles in a SaaS context, with a focus on ISO 27001, SOC, AWS, and vulnerability management.
• At least 2 years team lead experience in a 24x7 global SOC
• Experience with AWS security tools and services in a production SaaS environment.
• Experience with Tenable and/or similar tools for vulnerability management.
• Familiarity with Jamf and Intune for endpoint compliance and hardening.
• Good understanding of network security fundamentals, including cloud networking, segmentation, firewalls, and VPNs.
• Ability to generate and present clear and actionable security and compliance reports to stakeholders.
• Experience with DevOps tools, infrastructure-as-code, and CI/CD pipelines.

Responsibilities

• Support the ongoing operation of the ISMS (ISO 27001-aligned) including evidence collection, control implementation, and audit readiness.
• Work with DevOps and cloud teams to implement and monitor security controls across AWS infrastructure and services like EC2, IAM, S3, RDS.
• Manage and operationalise vulnerability management using Tenable, AWS Inspector, and Snyk: schedule scans, triage findings, and track remediation.
• Administer and ensure compliance of endpoints using Jamf and Microsoft Intune.
• Monitor alerts and findings from AWS-native tools (GuardDuty, Security Hub) and coordinate incident response activities.
• Produce and maintain management reports and dashboards detailing vulnerability status, endpoint security compliance, and audit readiness.
• Support ISMS documentation, including SoA, risk assessments, corrective actions, and control mapping.
• Participate in internal and external audits by preparing evidence and delivering technical walkthroughs.
• Support policy implementation, training activities, and DevOps-aligned security processes.
• Prepare the organisation for SOC 2 certification
• Specify and implement security and compliance protocols for Alchemy SaaS products
• Begin to identify tooling and partners to initiate a hybrid external/internal SOC.
• Contribute to incident response testing and post-incident reviews.
• Sets a positive example for quality and responsibility
• Prepares all necessary project documentation and processes to enable ongoing support of Alchemy's software products.

Skills

ISO 27001

SOC

AWS

vulnerability management

team leadership

DevOps

IaC

CI/CD

network security

reporting

stakeholder communication

Education

Bachelor's degree in Information Security or related field

Tools

Tenable

Jamf

Intune

GuardDuty

Security Hub

AWS Inspector

Snyk

Job description

Alchemy in Dubai seeks a senior security professional to operationalise an ISO 27001-aligned ISMS and lead security operations for a SaaS platform. You will coordinate with DevOps and cloud teams to implement robust controls across AWS, manage vulnerability scans with Tenable/AWS Inspector/Snyk, and ensure endpoint compliance with Jamf and Intune.

You will prepare audit evidence and drive incident response activities.