Senior Specialist – InfoSec Ops Management

Tanqeeb; Abu Dhabi; On-site; AED 250,000 - 420,000; Full time

Job summary

Tanqeeb in the United Arab Emirates seeks an experienced information security professional to own and operate an enterprise security technology portfolio. Responsibilities include data protection, PAM, endpoint and XDR management, policy engineering, health monitoring and incident support.

The role also covers backup coverage for database activity monitoring and API security monitoring, with a focus on continuous control improvement and audit readiness.

Qualifications

• Bachelor's degree in Cybersecurity, Computer Science, Information Technology, Engineering or related discipline.
• Relevant professional certification in information security or audit is preferred.

Responsibilities

• Lead day-to-day operation and lifecycle management of information security platforms.
• Design, implement and tune data loss prevention, information protection, access-control and network-security policies.
• Monitor platform health, policy deployment, event ingestion and licensing dependencies.
• Investigate security alerts and coordinate containment, recovery and root-cause analysis.
• Mentor supporting engineers and ensure knowledge transfer and backup readiness.

Skills

Information security

Security engineering

Security operations

Policy design

SIEM integration

ITSM integration

Least privilege

Education

Bachelor's degree in Cybersecurity/CS/IT/Engineering

Tools

SIEM

ITSM

Job description

Job Purpose :-

Own and operate a broad enterprise security technology portfolio covering data protection, privileged access management, endpoint and extended detection and response, deception, and network threat detection and prevention. The role combines platform administration, policy engineering, service-health monitoring, incident support, configuration tuning, security integrations, operational reporting and continuous control improvement. The role also provides structured backup coverage for database activity monitoring and API security monitoring.

Key Responsibilities : -

• Lead day-to-day operation, administration and lifecycle management of assigned information security platforms.


• Design, implement, test and tune data loss prevention, information protection, access-control, endpoint, detection and network-security policies.


• Monitor platform availability, agent and sensor health, policy deployment, event ingestion, integration status, capacity and licensing dependencies.


• Investigate security alerts and service issues; coordinate containment, recovery, escalation and root-cause analysis.


• Maintain privileged-access controls, including account onboarding, credential governance, session monitoring, access reviews and emergency-access controls.


• Maintain endpoint and XDR coverage, validate telemetry, investigate events and coordinate approved response actions.


• Operate deception, intrusion-detection and intrusion-prevention controls; tune policies and exceptions.


• Integrate security telemetry with SIEM, ITSM and approved monitoring or case-management services.


• Own technology changes through impact assessment, testing, approval, implementation, rollback planning and validation.


• Maintain SOPs, runbooks, architecture records, baselines, inventories, access matrices and recovery procedures.


• Produce reporting covering coverage, availability, incidents, exceptions, risks, backlogs and remediation.


• Support audits, risk assessments and closure of technology findings.


• Mentor supporting engineers and ensure knowledge transfer and backup readiness.


• Provide first-level backup coverage for database activity monitoring and API security monitoring.

Required Experience and Skills : -

• 10+ years of information security, security engineering or security operations experience.


• Deep hands-on experience in at least two primary domains: DLP/information protection, PAM, endpoint/XDR, deception or IDS/IPS; working exposure to the remaining domains is preferred.


• Experience designing and tuning policies, classifiers, detection logic, thresholds, exceptions and response actions.


• Experience with security integrations, APIs, event forwarding, SIEM, ITSM and incident workflows.


• Strong understanding of least privilege, data classification, endpoint telemetry and network-security controls.


• Ability to troubleshoot platform, connector, agent, sensor, policy and event-ingestion issues.


• Strong documentation, reporting, stakeholder-management and mentoring skills.

Education and Preferred Credentials :

• Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, Engineering or a related discipline.


• Relevant professional certification in information security, security management or audit is preferred.


• Capability-based certifications in data protection, privileged access, endpoint/XDR or network security are advantageous.


• IT service management certification is advantageous.

Success Measures :-

• Platforms remain supported, available, integrated and measurably effective.


• Coverage gaps and failed components are identified and tracked to closure.


• Policy changes are tested, approved, documented and validated.


• Alert quality improves through evidence-based tuning.


• Documentation, backup access and knowledge-transfer records remain audit-ready.