About Us: Platinumlist.net, a pioneering leader in the online event guide and ticketing solution industry, has been revolutionizing the event landscape in the Gulf region since 2009. As the largest ticketing provider in the GCC, we proudly serve an extensive array of events across the United Arab Emirates, Saudi Arabia, Oman, Bahrain, Qatar, and Kuwait from our Dubai-based headquarters.
About the Role: You will own information security at Platinumlist end to end: the corporate side (office networks, endpoints, identity and employee awareness across all our locations) and the platform side (cloud infrastructure, product security and the protection of customer and payment data), working hand in hand with our engineering and Dev Ops teams. It is a broad, hands-on role with real ownership — you will set the standards, build the tooling and run the operation, with budget for the security stack and external specialists where depth is needed (e.g. penetration testing). You will report to the CPO and act as the company's focal point for all security matters.
Key Responsibilities:
Corporate network and office security Own the security architecture of our offices across the region: design, standardise and maintain secure LAN/WLAN, VLAN segmentation, VPN, NAC and 802.1XAdminister firewalls, managed switches, wireless, VPN gateways and IDS/IPS; maintain hardening baselines, configuration templates and network documentation Run regular audits, configuration and access reviews, and drive remediation to completion Lead the security side of office openings, relocations and upgrades: define requirements for ISPs and contractors, supervise implementation and sign off with acceptance testing Security monitoring and incident response Own the detection stack (SIEM, EDR/XDR, SOAR, email and identity monitoring): integrate log sources, build and tune detection rules, and keep false positives low Configure automated response where appropriate and ensure critical events always reach the right people — the monitoring itself runs 24/7; you make sure it works Investigate and contain incidents (phishing, malware, account compromise, anomalous access), coordinating with IT, Dev Ops, engineering, HR and legal as needed Run post-incident reviews and feed lessons back into detections, controls and employee guidance. Participate in a critical-incident escalation rota Product, cloud and data security Partner with engineering and Dev Ops on the security of our production cloud infrastructure: posture reviews, access and secrets management, logging and alerting coverage Own vulnerability management for the platform and coordinate external penetration tests; track findings through to remediation Support secure development practices: security requirements in the SDLC, dependency and code-scanning tooling, and security review of significant changes Safeguard customer personal and payment data: support PCI DSS compliance and alignment with regional data protection regulations (including UAE and KSA PDPL) Endpoint, Identity, and Corporate IT Security Implement and administer EDR/XDR, NGAV, DLP, MDM and patch management across corporate laptops, desktops and mobile devices Enforce MFA, least privilege, privileged access controls and account lifecycle management; run periodic access reviews of users, admins, service accounts and third parties Secure and monitor our corporate platforms (Google Workspace / Microsoft 365) and ensure joiners, movers, leavers and contractor access are handled cleanly Governance, risk and vendor security Develop and maintain pragmatic, enforceable security policies and technical standards, applying ISO/IEC 27001, NIST CSF and CIS Controls where they add value Run risk assessments, track risks and exceptions to resolution, and support internal and external audits with documentation and evidence Evaluate vendors and contractors from a security standpoint; define acceptance criteria and keep third-party access limited, monitored and revoked when no longer needed Security awareness Deliver security onboarding and regular refresher training across all offices; run phishing simulations and act on the results Write clear, practical security guidance for employees and build a strong security culture together with HR and management
Requirements
4+ years of hands-on security experience spanning at least two of: network security, security operations (SIEM/EDR, detection, IR), cloud security, corporate IT security. A degree in a relevant technical field or equivalent practical experience Strong networking foundations: TCP/IP, routing and switching, firewall policy management, VLANs and segmentation, NAC/802.1X, site-to-site and remote-access VPNPractical experience operating SIEM and EDR/XDR platforms, writing detection logic and investigating real incidents Working knowledge of cloud security (AWS, GCP or Azure): IAM, network controls, logging, posture management Understanding of application security fundamentals and experience running vulnerability management or coordinating penetration tests Familiarity with ISO/IEC 27001, NIST CSF and CIS Controls; exposure to PCI DSS or data protection compliance is a strong plus Experience supporting infrastructure across multiple offices or locations, and coordinating contractors and vendors Clear written and spoken English and Russian; ability to produce documentation people actually use
Nice to have:
Certifications such as CISSP, CCSP, OSCP, CEH, Security+ or CCNP Security Experience with SOAR or AI-assisted detection and investigation tooling Experience delivering security awareness training Arabic language skills
Benefits
Full ownership of security at the GCC's largest ticketing platform — you define the architecture, the standards and the roadmap A genuinely broad technical playground: multi-country office infrastructure, cloud platform, high-traffic consumer product Budget for tooling and external expertise; direct access to leadership Participation in new office launches and infrastructure modernisation across the region Competitive salary and benefits; a friendly, international team in Dubai