Cybersecurity Engineer

Kuwait Drilling Fluids & Oil Services; Ahmadi; On-site; KWD 6,000 - 10,000; Full time

Job summary

Kuwait Drilling Fluids & Oil Services is seeking a Cybersecurity Engineer to safeguard information systems, applications and networks. You will monitor, investigate and remediate threats, manage access controls and contribute to ISO 27001 certification efforts.

The role requires five+ years of hands-on security experience, proficiency with Microsoft Defender for Endpoint, Entra ID, CA/MFA, and SIEM. You will work in a small team with strong English communication and independent work capability.

Qualifications

• Bachelor's degree in Computer Science, IT, Computer Engineering, MIS or related field; cyber security specialization is a plus.
• Minimum five years of hands-on cybersecurity experience including monitoring and incident handling.
• Experience with Microsoft Defender for Endpoint and Office 365, and Microsoft Entra ID including Conditional Access and MFA.
• Experience with vulnerability scanning tools and end-to-end remediation follow-up.
• Exposure to SIEM or centralized log management platforms, preferably Microsoft Sentinel.
• Working knowledge of ISO 27001 and the NIST Cybersecurity Framework; ISO 27001 implementation/certification experience is advantageous.
• Ability to work independently in a small team with sound judgement.
• Clear written and spoken English.

Responsibilities

• Run day-to-day security monitoring across endpoint protection platforms and Microsoft Defender, investigating and escalating alerts as required.
• Investigate suspicious activity, phishing reports, and identity-related security events through to resolution.
• Conduct vulnerability scans, assess and prioritise findings, and drive remediation with infrastructure and application teams until closure.
• Handle cybersecurity incidents, including containment, evidence collection, root-cause review, and documentation.
• Administer and review multi-factor authentication, Conditional Access policies, privileged accounts, and periodic user access reviews.
• Assess KDF's current security posture, identify control gaps, and recommend improvements with clear justification and priority.
• Maintain the cybersecurity risk register and contribute to the development of policies, standards, and procedures.
• Support ISO 27001 certification activities, including control implementation, evidence preparation, and closure of nonconformities within timelines.
• Maintain security records and evidence, including access reviews, incident logs, vulnerability scans, and remediation history.
• Support audits by preparing evidence and tracking closure of findings and corrective actions.
• Contribute to alignment with the NIST CSF and Kuwait regulatory requirements.
• Support evaluation and implementation of additional security capabilities, including centralized log management and SIEM.
• Deliver cybersecurity awareness activities, including phishing simulations and refresher training.
• Prepare regular security reports and dashboards highlighting risks, trends, and recommended actions.

Skills

Cybersecurity monitoring

Incident handling

Vulnerability remediation

Identity & access management

MFA administration

SIEM

ISO 27001 / NIST CSF

Microsoft Defender for Endpoint

Microsoft Entra ID

Microsoft Sentinel

Policy & governance

Education

Bachelor's degree in Computer Science / IT / Computer Engineering / MIS

Tools

Microsoft Defender for Endpoint

Office 365

Microsoft Entra ID

Conditional Access

MFA administration

Microsoft Sentinel

Job description

Role Purpose

The Cybersecurity Engineer is responsible for the day-to-day security of KDF's information systems, applications, networks, and digital services. The role covers security monitoring, vulnerability management, and incident handling, and contributes to KDF's cybersecurity governance, risk, and compliance activities under the direction of the Divisional Head - Technology & Digitalization Transformation. The position reports to the Assistant Manager - Technology & Cybersecurity.

As KDF's first dedicated cybersecurity position, the role suits a practitioner who can assess the current environment, identify gaps, and recommend practical improvements rather than wait for direction. The role also offers direct involvement in KDF's ISO 27001 certification programme.

Key Roles and Responsibilities

• Run day-to-day security monitoring across endpoint protection platforms and Microsoft Defender, investigating and escalating alerts as required.
• Investigate suspicious activity, phishing reports, and identity-related security events through to resolution.
• Conduct vulnerability scans, assess and prioritise findings, and drive remediation with infrastructure and application teams until closure.
• Handle cybersecurity incidents, including containment, evidence collection, root-cause review, and documentation.
• Administer and review multi-factor authentication, Conditional Access policies, privileged accounts, and periodic user access reviews.
• Assess KDF's current security posture, identify control gaps, and recommend improvements with clear justification and priority.
• Maintain the cybersecurity risk register and contribute to the development of policies, standards, and procedures.
• Support KDF's ISO 27001 certification programme, including control implementation, evidence preparation, and closure of nonconformities within agreed timelines.
• Maintain security records and evidence, including access review records, incident logs, vulnerability scan results, and remediation history.
• Support internal and external audits by preparing evidence and tracking closure of findings and corrective actions.
• Contribute to alignment with the NIST Cybersecurity Framework and applicable Kuwait regulatory requirements.
• Support the evaluation and implementation of additional security capabilities, including centralised log management and SIEM.
• Deliver cybersecurity awareness activities, including phishing simulations and refresher training.
• Prepare regular security reports and dashboards for management, highlighting risks, trends, and recommended actions.

Requirements

• Bachelor's degree in Computer Science, Information Technology, Computer Engineering, Management Information Systems, or a related discipline. A degree or specialisation in Cybersecurity is an advantage.
• Minimum five years of hands-on cybersecurity experience, including direct responsibility for monitoring and incident handling.
• Practical working experience with Microsoft Defender for Endpoint and Office 365, and Microsoft Entra ID, including Conditional Access and MFA administration.
• Experience with vulnerability scanning tools and end-to-end remediation follow-up.
• Exposure to SIEM or centralised log management platforms, ideally Microsoft Sentinel.
• Working knowledge of ISO 27001 and the NIST Cybersecurity Framework. Prior involvement in an ISO 27001 implementation or certification is a strong advantage.
• Sound judgement and the ability to work independently in a small team with limited supervision.
• Clear written and spoken English, with the ability to explain security matters to non-technical colleagues.

Certifications

• CompTIA Security+ or Microsoft SC-200 required, or willingness to obtain within the first year.
• Microsoft SC-300, CEH, or ISO 27001 Lead Implementer an advantage.