Senior System Security Risk Control Engineer

Careers International; Dubai; On-site; AED 150,000 - 240,000; Full time

Job summary

Careers International in Dubai, UAE, is seeking an experienced Security Specialist to lead design and governance of our security architecture. You will craft and implement security strategies to protect critical systems, data, and networks across the organization.

Responsibilities include security assessments, risk mitigation, penetration testing, vulnerability monitoring, and handling incidents. The role requires strong English and Chinese communication, with hands-on Linux/Windows knowledge

Qualifications

• 3+ years hands-on experience in system security or related fields, focusing on risk assessment and mitigation.

Responsibilities

• Develop and implement security strategy and management systems for the company.

Skills

System security

Risk assessment

Incident response

Web security

Chinese language

English language

Security monitoring

Penetration testing

Security policies

Education

Degree in System Security / CS / IT

Tools

IDS/IPS

Firewalls

Monitoring systems

Security tooling

Job description

Security Planning and System Design:

• Develop and implement the company's overall information security strategy and management system.
• Design and execute security management processes to safeguard the company's systems, data, and networks.

Security Assessments and Risk Management:

• Conduct security assessments on internal systems, networks, and servers.
• Work closely with relevant teams to implement security solutions, track progress, and promote effective execution.

Penetration Testing and Intrusion Detection:

• Lead penetration testing efforts to identify weaknesses and vulnerabilities within the company's infrastructure.
• Conduct system intrusion detection, alarm generation, trace analysis, and implement measures to prevent further risks.

Security Vulnerability Monitoring:

• Continuously monitor and track emerging security vulnerabilities, including web application attacks such as SQL injection, XSS, etc.
• Develop strategies to mitigate these vulnerabilities and avoid security risks associated with the company's systems.

Team Development and Knowledge Management:

• Guide and train team members to improve their technical expertise and maintain a high level of security knowledge.
• Ensure that the team's documentation and security protocols are continuously updated and well-documented.

Requirements

• At least 3 years of hands-on experience in system security or related fields, with expertise in security risk assessment and mitigation.
• Degree in System Security, Computer Science, Information Technology, or related fields.
• Strong understanding of Linux and Windows operating systems and related security policies and procedures.
• Familiarity with WEB application servers and security protocols.
• Proficiency in using mainstream security tools and technologies such as IDS/IPS, firewalls, and other monitoring systems.
• Hands-on experience in formulating security policies, handling incidents, and responding to security breaches.
• Experience with system penetration testing, web application security, and vulnerability discovery.
• Deep understanding of web security issues, including common vulnerabilities like SQL injection, Cross-Site Scripting (XSS), etc.Ability to perform risk assessments, vulnerability analysis, and threat mitigation.
• Proficient in Chinese and English (both written and spoken) for clear communication of security issues and risk reports.