Senior System Security Risk Control Engineer

Careers International; Dubai; On-site; AED 120,000 - 200,000; Full time

Job summary

A leading security solutions provider in Dubai seeks an experienced security professional to develop and implement comprehensive information security strategies. The role involves conducting security assessments, leading penetration testing initiatives, and continuously monitoring vulnerabilities. Candidates must have at least 3 years of experience in system security, a relevant degree, and proficiency in both Chinese and English. This position offers an opportunity to enhance security protocols and train team members in best practices.

Qualifications

• At least 3 years of hands-on experience in system security or related fields.
• Strong understanding of Linux and Windows operating systems.
• Familiarity with web application servers and security protocols.

Responsibilities

• Develop and implement the company’s information security strategy.
• Conduct security assessments on internal systems and networks.
• Lead penetration testing efforts to identify weaknesses in infrastructure.
• Continuously monitor and track emerging security vulnerabilities.

Skills

System security

Security risk assessment

Linux

Windows

Security policies

Penetration testing

Vulnerability analysis

Chinese

English

Education

Degree in System Security, Computer Science, Information Technology or related fields

Tools

IDS/IPS

Firewalls

Job description

Security Planning and System Design

• Develop and implement the company’s overall information security strategy and management system.
• Design and execute security management processes to safeguard the company's systems, data, and networks.

Security Assessments and Risk Management

• Conduct security assessments on internal systems, networks, and servers.
• Work closely with relevant teams to implement security solutions, track progress, and promote effective execution.

Penetration Testing and Intrusion Detection

• Lead penetration testing efforts to identify weaknesses and vulnerabilities within the company's infrastructure.
• Conduct system intrusion detection, alarm generation, trace analysis, and implement measures to prevent further risks.

Security Vulnerability Monitoring

• Continuously monitor and track emerging security vulnerabilities, including web application attacks such as SQL injection, XSS, etc.
• Develop strategies to mitigate these vulnerabilities and avoid security risks associated with the company's systems.

Team Development and Knowledge Management

• Guide and train team members to improve their technical expertise and maintain a high level of security knowledge.
• Ensure that the team’s documentation and security protocols are continuously updated and well-documented.

Requirements

• At least 3 years of hands‑on experience in system security or related fields, with expertise in security risk assessment and mitigation.
• Degree in System Security, Computer Science, Information Technology, or related fields.
• Strong understanding of Linux and Windows operating systems and related security policies and procedures.
• Familiarity with web application servers and security protocols.
• Proficiency in using mainstream security tools and technologies such as IDS/IPS, firewalls, and other monitoring systems.
• Hands‑on experience in formulating security policies, handling incidents, and responding to security breaches.
• Experience with system penetration testing, web application security, and vulnerability discovery.
• Deep understanding of web security issues, including common vulnerabilities such as SQL injection, Cross‑Site Scripting (XSS), etc. Ability to perform risk assessments, vulnerability analysis, and threat mitigation.
• Proficient in Chinese and English (both written and spoken) for clear communication of security issues and risk reports.