Principal Information Security Assurance Engineer/Specialist

beIN MEDIA GROUP; Doha; On-site; QAR 180,000 - 240,000; Full time

Job summary

beIN MEDIA GROUP seeks a Principal Information Security Assurance Engineer to lead enterprise-wide security assurance initiatives, evaluate security across systems, apps, and databases, and enforce a robust SDLC with security at every stage.

You will oversee penetration testing, vulnerability assessments, audit logs, privileged access reviews, and incident support, reporting to the Director of Information Security and shaping the cybersecurity strategy.

Qualifications

• Bachelor degree in IT, CS, Cyber Security or related field.
• Minimum 6 years of IT security experience in corporate environments.
• Experience in application security, auditing, and security governance.

Responsibilities

• Review audit logs for user applications and privileged access.
• Audit changes and privileged level access to services, apps, and databases.
• Ensure security is integrated into the SDLC.
• Lead internal and external penetration testing and risk assessments.
• Coordinate vulnerability scanning and patching activities.
• Assess change requests for security impact and obtain approvals.
• Support security incident analysis and post-incident reviews.

Skills

Penetration testing

Vulnerability assessments

Audit & compliance

SDLC security

Risk management

Education

Bachelor degree in IT/CS/Cyber Security or related field

Job description

Position Purpose Summary

Principal Information Security Assurance Engineer/ Specialist lead and enforce enterprise-wide security assurance initiatives by evaluating and strengthening security mechanisms across systems, applications, and databases. Conduct comprehensive audits to detect and prevent unauthorized or malicious activities by users and administrators. Drive the adoption and continuous improvement of a secure SDLC framework across the be IN. Oversee and execute regular penetration testing and vulnerability assessments to safeguard the integrity, confidentiality, and availability of information assets. Provide strategic, administrative, and technical leadership to support the Director of Information Security in developing and implementing robust cybersecurity strategies.

Key Responsibilities and Accountabilities

• Review audit log of user applications, profile administration activities and privileged users, review objects/services access and usage.
• Audit operational change due to the change request.
• Audit privileged level access and changes to services, applications, databases.
• Ensure security mechanisms are considered within the SDLC.
• Conduct periodically internal penetration testing in assigned areas and contribute to the assessment of the security posture across all of infrastructure and oversee scheduled and event/service driven external penetration testing.
• Conduct vulnerability scanning and be able to interpret the results.
• Tracks and coordinate the security patching activities with relevant teams and provide the required support.
• Assess change request for the risk it poses to application and databases security and review the subsequent impact on operations.
• Approve the request after checking for approval from necessary authorities.
• Examine mechanisms and technologies in achieving and optimizing security controls and processes.
• To provide support and analysis during and after a security incidents, as necessary.
• Analyzes general information assurance-related technical problems and provide support in solving these problems.
• Research security enhancements and make recommendations to management.
• Coordinate the activities related to Information Security Projects.

Education

Minimum Bachelor Degree in IT, Computer Science, Cyber Security, Business Administration or related field.

Experience

Minimum 6 years of experience in IT domain, penetration testing, professional experience in corporate Applications Security, Analysis and Solutions Delivery or in any similar role.

Please refer to our privacy policy to know more about how we process your personal data