Head of Security Architecture & Engineering

The IN Group; Muscat; On-site; OMR 30,000 - 60,000; Full time

Job summary

The IN Group is seeking an accomplished Security Architect to lead security architecture, tooling, and platform security across the software lifecycle. The role demands hands-on expertise in DevSecOps, cloud and application security, and security automation.

You will oversee 24x7 detection/response operations and drive secure-by-design practices, coordinating with cross-functional teams to embed security into the SDLC and IT lifecycles. A CISSP and related certifications are highly valued.

Qualifications

• 10+ years in security architecture, engineering, or DevSecOps.
• Experience designing security solutions and reference architectures.
• Hands-on with SIEM, EDR, NDR, SOAR platforms.
• Hands-on with cloud security, application security, and infrastructure security.
• Understanding of SDLC integration and security automation.
• Experience with security technology selection and implementation.
• CISSP certification required.
• GIAC certifications (GSOM, GCIA) highly advantageous.
• Vendor certifications in major security platforms.
• CISSP-ISSAP or SABSA certification preferred.
• Cloud security certifications (AWS/Azure).
• DevSecOps or application security credential.

Responsibilities

• Accountable for technical security capabilities, including design, engineering, and 24x7 threat detection and response.
• Accountable for Security Architecture and integration of security into development and IT lifecycles.
• Engineering, reliability, and lifecycle management of all security platforms.
• Designs the security architecture and secure-by-design tooling and platforms.
• Leads the Security Architecture function with guardrails and secure reference architectures.
• Oversees Platform/Infrastructure and Application Security integration (DevSecOps, SAST/SCA).
• Manages Security Data, Analytics & AI functions for security data analytics.
• Optimises security technology solutions by establishing workflows and automation.

Skills

Security architecture

Security engineering

DevSecOps

Security automation

SDLC integration

Threat detection & response

Education

Bachelor's degree in Computer Science/Cyber Security

CISSP

GIAC GSOM/GCIA

CISSP-ISSAP or SABSA

Cloud security certifications (AWS/Azure)

DevSecOps credential

Tools

SIEM

EDR

NDR

SOAR

Job description

• Accountable for all technical security capabilities, including the design, engineering, and operation of security tools, as well as the 24x7 detection and response to cyber threats.
• Accountable for Security Architecture and the integration of security into the development and IT lifecycles.
• Accountable for the engineering, reliability, and lifecycle management of all security technology platforms
• Designs the security architecture and engineers the security tooling and platforms (Secure-by-Design).
• Accountable for the 'Design' phase of the control lifecycle for technical controls - translating second line of Defence (2LOD) Control Objectives and Minimum Control Security into specific technical solutions facilitated.
• Leads the Security Architecture function, defining patterns, guardrails, and secure reference architectures and requirements
• Oversees the operational management (Control Ops) of core security tools (e.g., EDR, Network Security, Email Security, PAM, DLP operations).
• Oversees the engineering and integration of Platform/Infrastructure Security and Application Security (DevSecOps, SAST/SCA). Responsible for embedding security into the “Software Development Lifecycle (SDLC) .
• Manages the Security Data, Analytics & AI functions for data analytics for security.
• Optimises security technology solutions by establishing workflows and automation
• Responsible for the inventory of all security technologies in place and their respective status (owner, licensing, use-cases, renewals, etc.)
• Designs the security architecture and engineers the security tooling and platforms (Secure-by-Design).
• Leads the Security Architecture function, defining patterns, guardrails, and secure reference architectures and requirements
• Oversees the engineering and integration of Platform/Infrastructure Security and Application Security (DevSecOps, SAST/SCA). Responsible for embedding security into the “Software Development Lifecycle (SDLC)”
• Manages the Security Data, Analytics & AI functions for data analytics for security.
• Optimises security technology solutions by establishing workflows and automation
• Develops and maintains security patterns, guardrails, and reference architectures for key domains (Cloud, Infrastructure, Data, Application)

Personnel Specifications:

• 10+ years in security architecture, engineering, or DevSecOps
• Experience designing security solutions and reference architectures
• Hands-on experience with SIEM, EDR, NDR, SOAR platforms
• Hands-on with cloud security, application security, and infrastructure security
• Understanding of SDLC integration and security automation
• Experience with security technology selection and implementation
• Bachelor's degree in Computer Science, Cyber Security, or related field
• CISSP certification required
• GIAC certifications (GSOM, GCIA) highly advantageous
• Vendor certifications in major security platforms
• CISSP-ISSAP or SABSA certification preferred
• Cloud security certifications (AWS Security, Azure Security)
• DevSecOps or application security credential