Security Guard Jobs in UAE
8947 Jobs Found
Save and set alert for similar positionsManage alerts
Remote Junior Cybersecurity Documentation Analyst — AED 8,000–12,000 per month
Information Technology
We’re looking for a detail-oriented and motivated Remote Junior Cybersecurity Documentation Analyst to join our information security team.<br><br>In this role, you’ll help maintain technical security documentation, organize internal procedures, update security records, and ensure that important information is accurate, accessible, and up to date. You’ll work with cybersecurity, IT, and compliance professionals while learning how organizations document and manage their security practices.<br><br>This opportunity is ideal for recent graduates, career changers, and aspiring cybersecurity professionals who have strong writing and organizational skills and want to enter the information security field.<br><br>Previous professional cybersecurity experience is not required. Candidates with administrative experience, technical writing skills, foundational IT knowledge, or a willingness to learn are encouraged to apply.<br><br>**Location:** Fully remote, with Dubai and UAE-based applicants welcome, subject to employment eligibility.<br><br>**Salary:** AED 8,000–12,000 per month, depending on skills and qualifications.<br><br>**Employment type:** Full-time, permanent.<br><br>## Key Responsibilities<br><br>* Create, update, and maintain cybersecurity policies, procedures, and technical documents.<br>* Organize security guidelines, operating procedures, and internal knowledge resources.<br>* Assist with documenting security incidents, assessments, and remediation activities.<br>* Review documents for clarity, consistency, accuracy, and completeness.<br>* Maintain document version histories, review schedules, and approval records.<br>* Collaborate with technical teams to gather information for security documentation.<br>* Help prepare user guides, checklists, process diagrams, and internal reference materials.<br>* Support the organization of audit evidence and compliance documentation.<br>* Research security terminology and best practices to improve documentation quality.<br>* Handle confidential information in accordance with company procedures.<br><br>## Candidate Requirements<br><br>* Interest in cybersecurity, IT, technical writing, or information security governance.<br>* Strong written communication, proofreading, and editing skills.<br>* Excellent attention to detail and organizational abilities.<br>* Basic understanding of IT systems and information security concepts.<br>* Ability to explain technical information in clear, accessible language.<br>* Comfortable using word processors, spreadsheets, and collaboration platforms.<br>* Ability to manage deadlines and work independently in a remote environment.<br>* Willingness to learn cybersecurity terminology, processes, and documentation standards.<br><br>The following are advantageous but not mandatory:<br><br>* A degree or diploma in IT, cybersecurity, English, communications, or a related field.<br>* Experience in technical writing, editing, administration, or knowledge management.<br>* Introductory familiarity with ISO 27001, NIST guidance, or information security policies.<br>* Basic knowledge of networking, operating systems, or cloud computing.<br>* Experience maintaining document repositories or tracking document revisions.<br>* Relevant coursework, personal projects, or transferable professional experience.<br><br>No previous professional cybersecurity experience is required. Candidates with strong writing skills and a genuine willingness to learn are encouraged to apply.<br><br>## What We Offer<br><br>* Fully remote working arrangements.<br>* Proposed monthly salary of AED 8,000–12,000.<br>* Onboarding and guidance from experienced IT and cybersecurity professionals.<br>* Exposure to security procedures, technical documentation, and governance practices.<br>* Opportunities to develop technical writing and information security skills.<br>* Support for relevant professional training and certifications.<br>* Collaboration with cybersecurity, IT, risk, and compliance teams.<br>* Potential career progression into Security Documentation Specialist, Technical Writer, GRC Analyst, or Information Security Analyst roles.<br>* A supportive environment focused on accuracy, teamwork, and continuous learning.<br><br>## Our Ideal Candidate<br><br>You enjoy organizing information, improving written materials, and helping people understand technical processes. You may be a recent graduate, an aspiring cybersecurity professional, or someone transitioning from administration, communications, technical support, or content development.<br><br>We value accuracy, clear communication, reliability, and a willingness to learn over extensive professional experience.<br><br>If you’re ready to start a career supporting cybersecurity through clear, accurate, and well-maintained documentation, we encourage you to apply.<br><br>**Work arrangement:** Fully remote, subject to UAE employment and location requirements.<br><br>**Salary note:** AED 8,000–12,000 per month is a proposed hiring estimate for this sample job advertisement, not a verified market benchmark or a confirmed employer offer.<br>
<strong>Job Description<br><br></strong>Responsible for the implementation, configuration, monitoring, and maintenance of WAF (Web Application Firewalls) deployed for internal and external customers. Work closely with the other Cybersecurity teams to ensure the protection of web applications via WAF, from various cyber threats and vulnerabilities including OWAPS Top 10 attacks. Effectively communicate and collaborate with different stakeholders for new WAF deployments and troubleshooting of operational issues at hand.<br><br><strong>Responsibilities<br><br></strong><ul><li>End-to-end provisioning of web applications on WAF including requirements gathering, defining the scope of protection and creating appropriate/tailored web security profile on WAF as per the web application architecture. </li><li>Fine-tune the new security policies via rigorous testing of all web application flows to ensure maximum possible suppression of false positives for effective SOC monitoring. </li><li>Plan and perform the security enhancements on security profiles of the existing web applications protected by WAF, ensuring minimal impact on live traffic. </li><li>Fine-tune the attack logs for existing web applications by identifying false positives and updating the security profiles accordingly for effective monitoring. </li><li>Keep track of the web applications certificates’ expiry on WAF and get them updated well in time to avoid any impact to users. </li><li>Evaluate all the exceptions/whitelistings for any security impact on web applications before placing them on WAF. </li><li>Get regular Security Assessments and audits done to ensure the effectiveness of WAF configurations and policies. </li><li>Support the SOC/Incident Response team by providing the required attack logs from WAF for incident under investigation. </li><li>Regularly monitor WAF system resources like CPU, memory, disk utilization to be within the threshold range, and raise the flags in timely manner. </li><li>Ensure all WAF deployments to be running up-to-date and vendor supported OS versions. </li><li>Implement corrective measures and remediation actions to address newly discovered security vulnerabilities on WAF. </li><li>Evaluate, plan, test and execute the WAF upgrades to latest recommend stable versions for all WAF deployments, after extensive bug-scrubbing and careful analysis of all changes in new version to ensure no impact on protected application after the upgrade. </li><li>Maintain proper and updated documentation related to WAF HLD, LLD, configurations, security policies, applications status and owner information, for all WAF deployments. </li><li>Identify any unusual activity and attacks by monitoring the administrative and security alerts via regular reports. </li><li>Monitor licenses and vendor contract expiry of all WAF deployments and communicate with the stakeholders accordingly. </li><li>Perform regular backup restoration test drill for all WAF deployments. </li><li>Highlight the operational challenges and current issues on all WAF deployments. </li><li>Ensure that periodic backups to remote backup server are properly configured and are running successfully as per the schedule. </li><li>Apply compensatory security controls on WAF for protected web applications if they cannot be fixed on application end. </li><li>Deploy and configure dedicated WAF instances based on special projects requirements and create customized security policies for protected web applications. </li><li>Integrate all WAF deployments with security controls including, but not limited to SIEM, PAM, RSA, Solarwinds etc. <br><br></li></ul><strong>Qualifications<br><br></strong><strong>Experience</strong>: Minimum 6 years’ experience related to WAF administration and web applications security.<br><br><ul><li>Certified Ethical Hacker (CEH) or similar certifications preferred. </li><li>Must have expertise in WAF F5 troubleshooting.</li><li>In-depth understanding of web application security principles, including OWASP Top 10 vulnerabilities and common attack vectors. </li><li>Strong knowledge of network protocols, firewall technologies, and web server platforms. </li><li>Experience with scripting languages is preferred for automation and customization of WAF configurations. </li><li>BS (Computer Science, Information Technology, or related field) </li><li>Excellent analytical and problem-solving skills, with the ability to prioritize and troubleshoot complex security issues. </li><li>Effective communication skills, with the ability to collaborate with cross-functional teams and articulate technical concepts to non-technical stakeholders.</li></ul>
We're Hiring: <strong>Senior Endpoint Detection Specialist</strong><p><strong> Location:</strong> United Arab Emirates (Remote)</p><p><strong> Employment Type:</strong> Full-Time</p><p><strong> Experience Level:</strong> Mid-Level to Senior</p><p><strong> Work Arrangement:</strong> Fully Remote</p>About Us<p>We are a construction-focused organization committed to delivering complex projects through operational excellence, effective risk management, secure technology infrastructure, and collaborative project delivery. Our distributed teams work across Project Management, Construction, Engineering, Procurement, Commercial, Legal, Finance, Human Resources, Design, Quality, HSE, Consultants, Contractors, Suppliers, Logistics, Administration, Information Technology, and Executive Leadership to support business continuity, protect sensitive information, and maintain reliable digital operations.</p><p>As our technology environment continues to evolve, endpoint security plays a critical role in protecting corporate devices, project systems, remote workforces, and business-critical information against increasingly sophisticated cyber threats. We value professionals who combine strong technical expertise, analytical thinking, proactive threat detection, and disciplined incident handling to strengthen our security posture and reduce operational risk.</p>The Role<p>We are seeking an experienced <strong>Senior Endpoint Detection Specialist</strong> to design, administer, optimize, and maintain endpoint detection and response capabilities across the organization's enterprise environment. The successful candidate will be responsible for detecting, investigating, analyzing, and responding to suspicious endpoint activity, malicious processes, advanced persistent threats, ransomware, malware infections, credential theft, and other endpoint-related security incidents.</p><p>This role will focus on endpoint detection and response (EDR), endpoint telemetry analysis, threat hunting, detection engineering, security alert triage, incident investigation, and continuous improvement of endpoint security controls. The specialist will collaborate with Security Operations, Incident Response, Infrastructure, Network, Cloud, Identity and Access Management, Application Support, and other technology teams to improve detection coverage, accelerate incident containment, and protect corporate workstations, servers, virtual desktops, cloud workloads, and other managed endpoints.</p><p>The ideal candidate will bring hands-on experience with enterprise endpoint security platforms, endpoint telemetry, attack behavior analysis, security information and event management (SIEM) integration, threat intelligence, and established cybersecurity frameworks. The role requires a proactive approach to identifying security weaknesses, reducing false positives, improving detection accuracy, and ensuring that endpoint threats are investigated and addressed promptly.</p>Key Responsibilities1. Endpoint Detection and Response Management<ul><li>Administer, configure, monitor, and optimize enterprise endpoint detection and response platforms across supported IT environments.</li><li>Maintain endpoint security coverage across corporate workstations, laptops, servers, virtual desktops, remote devices, and supported cloud workloads.</li><li>Deploy and maintain endpoint detection agents, sensors, and associated security components in accordance with approved deployment procedures.</li><li>Monitor endpoint agent health, connectivity, policy compliance, telemetry ingestion, and detection functionality.</li><li>Investigate endpoints with missing agents, outdated security components, disabled protections, reporting failures, or incomplete monitoring coverage.</li><li>Maintain an accurate inventory of protected endpoints, operating systems, device ownership, security status, and assigned protection policies.</li><li>Configure endpoint protection policies based on device type, operating system, business criticality, risk exposure, and operational requirements.</li><li>Enforce appropriate endpoint security controls, including behavioral monitoring, malicious process detection, exploit prevention, and ransomware protection.</li><li>Support endpoint isolation, process termination, file quarantine, and other authorized containment actions when required.</li><li>Ensure endpoint security policies remain aligned with organizational standards, risk tolerance, and approved security architecture.</li><li>Evaluate new platform capabilities and recommend improvements to detection, response, investigation, and reporting functions.</li><li>Coordinate platform upgrades, configuration changes, agent updates, and policy deployments through established change management procedures.</li></ul>2. Security Alert Monitoring and Triage<ul><li>Review, prioritize, and investigate endpoint security alerts generated by EDR, antivirus, endpoint protection, and related monitoring technologies.</li><li>Assess alerts involving suspicious processes, malicious files, unauthorized scripts, unusual network connections, persistence mechanisms, and privilege escalation.</li><li>Analyze alert context, including endpoint identity, user activity, process ancestry, command-line arguments, file hashes, network indicators, and execution timelines.</li><li>Distinguish genuine threats from benign administrative activity, legitimate software behavior, and false-positive detections.</li><li>Correlate endpoint alerts with SIEM events, identity logs, network telemetry, email security findings, and cloud security signals.</li><li>Determine the severity, scope, and potential business impact of suspected endpoint compromises.</li><li>Identify recurring alerts, detection gaps, and patterns that may indicate coordinated or repeated attack activity.</li><li>Escalate critical and high-severity incidents in accordance with incident response procedures and established service-level agreements.</li><li>Maintain clear investigation notes, alert classifications, supporting evidence, and recommended remediation actions.</li><li>Ensure alerts are resolved, escalated, or tracked through the appropriate security case management workflow.</li></ul>3. Threat Hunting and Advanced Endpoint Analysis<ul><li>Conduct proactive threat-hunting activities to identify malicious behavior that may not trigger existing security alerts.</li><li>Develop and execute hypothesis-driven hunts using endpoint telemetry, threat intelligence, behavioral indicators, and known adversary techniques.</li><li>Investigate suspicious PowerShell execution, command-line activity, script interpreters, scheduled tasks, registry modifications, and other potential attack behaviors.</li><li>Analyze process trees, parent-child process relationships, loaded modules, file activity, authentication events, and network connections.</li><li>Search for indicators of compromise, including suspicious file hashes, domains, IP addresses, persistence artifacts, and malicious execution patterns.</li><li>Investigate potential ransomware activity, credential dumping, lateral movement, unauthorized remote access, and command-and-control communications.</li><li>Examine suspicious binaries and scripts using approved static analysis, sandboxing, and behavioral analysis tools.</li><li>Identify endpoint artifacts associated with phishing-based compromise, drive-by downloads, malicious attachments, and exploitation attempts.</li><li>Investigate anomalous endpoint behavior that may indicate insider threats, unauthorized software use, or policy violations.</li><li>Develop repeatable threat-hunting queries and document the methodology, findings, and recommended improvements.</li><li>Share actionable findings with Security Operations, Threat Intelligence, and Incident Response teams to improve organizational detection capabilities.</li><li>Support retrospective investigations to identify additional compromised endpoints following the discovery of a significant security incident.</li></ul>4. Detection Engineering and Rule Optimization<ul><li>Design, develop, test, deploy, and maintain endpoint detection rules, behavioral analytics, and threat detection logic.</li><li>Translate threat intelligence, incident findings, and observed attack techniques into actionable endpoint detections.</li><li>Develop detection logic for suspicious process execution, persistence, credential access, defense evasion, privilege escalation, and lateral movement.</li><li>Use relevant query languages and detection formats, such as Kusto Query Language (KQL), Structured Query Language (SQL), platform-specific search languages, and Sigma where applicable.</li><li>Map detection use cases to the MITRE ATT&CK framework to identify coverage gaps and improve visibility across adversary tactics and techniques.</li><li>Validate detection rules using controlled testing, approved simulation tools, and representative endpoint telemetry.</li><li>Tune alert thresholds, exclusions, behavioral policies, and correlation logic to reduce false positives without weakening meaningful security coverage.</li><li>Maintain detection rule documentation, ownership, version history, test results, and change records.</li><li>Review detection effectiveness following security incidents, threat intelligence updates, platform changes, and changes in the organization's technology environment.</li><li>Collaborate with SIEM and Security Operations teams to improve cross-platform correlation and investigation workflows.</li><li>Identify opportunities to automate repetitive detection validation, enrichment, alert classification, and response activities.</li><li>Establish quality standards for detection development, including accuracy, coverage, maintainability, and operational usefulness.</li></ul>5. Malware Analysis and Threat Investigation<ul><li>Investigate suspected malware infections, suspicious executables, malicious scripts, and potentially unwanted applications.</li><li>Analyze file hashes, digital signatures, file metadata, execution behavior, persistence mechanisms, and related endpoint artifacts.</li><li>Assess malware delivery methods, execution chains, payload behavior, and potential impact on affected systems.</li><li>Identify indicators associated with trojans, ransomware, spyware, remote access tools, loaders, and other malicious software.</li><li>Use approved malware analysis tools and isolated environments to examine suspicious samples safely.</li></ul>
<ul><li><p>Oversee and manage all security operations within the villa premises, ensuring the safety and privacy of residents and guests.</p></li><li><p>Direct and supervise a team of villa personnel, providing clear instructions and monitoring their work.</p></li><li><p>Implement and maintain robust security protocols, including access control, surveillance monitoring, security gate and emergency response plans.</p></li><li><p>Conduct regular security patrols and inspections to identify and mitigate potential risks or vulnerabilities.</p></li></ul><p><strong>Desired Candidate Profile</strong></p><ul><li><p>Possess a high school diploma or equivalent; further education in security management or a related field is advantageous.</p></li><li><p>Hold relevant security certifications (e.g., SIA, CPO) and a valid driver's license.</p></li><li><p>Demonstrate a minimum of 5 years of progressive experience in security or facilities management, preferably within a luxury residential or hospitality setting.</p></li><li><p>Arabic speaker is preferred</p></li></ul>
<ul><li>Oversee daily security operations to ensure the safety and protection of personnel and property, proactively identifying potential risks.</li><li>Develop and enforce security protocols, policies, and procedures to maintain a secure environment, adapting them as necessary based on evolving threats.</li><li>Conduct regular patrols and inspections of premises to deter and detect signs of intrusion or unusual activity, ensuring compliance with security standards.</li><li>Coordinate and lead emergency response efforts, including fire drills and evacuations, while maintaining clear communication with local authorities.</li></ul><p><strong>Desired Candidate Profile</strong></p><ul><li><p>High School Diploma in Security Management or equivalent.</p></li><li><p><strong>3–5 years of security services experience</strong>, including supervisory experience.</p></li><li><p><strong>Valid SIRA Security Supervisor certification is mandatory.</strong></p></li><li><p>Proven ability to manage, motivate, and lead a security team.</p></li><li><p>Good communication, leadership, problem-solving, and organizational skills.</p><p><br><strong>Apply Now</strong></p></li></ul>
<p>Job Title Driver Business Emirates Gas Job Purpose Responsible for conveying materials, equipment, and staff of the organization to the areas where they are required.</p><p>Principal Accountabilities</p><ul><li>Drive company vehicles to pick or drop employees.</li><li>Deliver important documents to required destinations.</li><li>Ensure that all deliveries have been signed and delivered to the correct recipient.</li><li>Keep vehicle clean and maintained always.</li><li>Perform preventative and regular maintenance on vehicle.</li><li>Maintain the record of the vehicles.</li></ul><h4>Additional Principal Accountabilities</h4><p>Cyber Information Security Responsibilities</p><ul><li>Comply with all applicable information security policies, standards, and procedures.</li><li>Classify and protect information assets in accordance with the Data Classification Standard.</li><li>Participate in mandatory information security awareness and training programs.</li><li>Support information security initiatives and activities within the organization.</li><li>Consider information security requirements when managing changes involving information assets.</li><li>Report security incidents, vulnerabilities, weaknesses, or non-compliance in accordance with established procedures.</li><li>Fulfil role-specific information security responsibilities and contribute to maintaining the effectiveness of the Information Security Management System (ISMS).</li></ul><p><strong>Desired Candidate Profile</strong></p><p>Experience</p><ul><li>Light vehicle license.</li><li>2 Years Experience in a similar capacity.</li><li>Good interpersonal skills.</li></ul>
<h2 class="h5">Job description</h2>
<div class="t-break" data-jb-field="description">
<span>Job Title <br></span><p><span><span>Driver</span></span></p><br>
<br><br>Business <br><p><span><span>Emirates Gas</span></span></p><br>
<br><br>Job Purpose <br><p><span><span><span><span>Responsible for conveying materials, equipment, and staff of the organization to the areas where they are required.</span></span></span></span></p><br>
<br><br>Principal Accountabilities <br><ul>
<li><span><span><span><span><span>Drive company vehicles to pick or drop employees.</span></span></span></span></span></li>
<li><span><span><span><span><span>Deliver important documents to required destinations.</span></span></span></span></span></li>
<li><span><span><span><span><span>Ensure that all deliveries have been signed and delivered to the correct recipient.</span></span></span></span></span></li>
<li><span><span><span><span><span>Keep vehicle clean and maintained always.</span></span></span></span></span></li>
<li><span><span><span><span><span>Perform preventative and regular maintenance on vehicle.</span></span></span></span></span></li>
<li><span><span><span><span><span>Maintain the record of the vehicles.</span></span></span></span></span></li>
</ul>
<br><br>Additional Principal Accountabilities <br><br>Cyber Information Security Responsibilities <br><p><br>
Comply with all applicable information security policies, standards, and procedures.<br>Classify and protect information assets in accordance with the Data Classification Standard.<br>Participate in mandatory information security awareness and training programs.<br>Support information security initiatives and activities within the organization.<br>Consider information security requirements when managing changes involving information assets.<br>Report security incidents, vulnerabilities, weaknesses, or non-compliance in accordance with established procedures.<br>Fulfil role-specific information security responsibilities and contribute to maintaining the effectiveness of the Information Security Management System (ISMS).</p><br><br><br>Experience <br><ul>
<li><span><span><span><span><span>Light vehicle license.</span></span></span></span></span></li>
<li><span><span><span><span><span>2 Years’ Experience in a similar capacity.</span></span></span></span></span></li>
<li><span><span><span><span><span>Good interpersonal skills.</span></span></span></span></span></li>
</ul>
<br><br><br>
</div>
<p><strong>*** Must be based in the UAE</strong></p><p><br></p><p>We are working with a global, fast-growing organisation to appoint a Global Head of Cybersecurity.</p><p>This is a senior leadership role responsible for setting the Group's cybersecurity strategy, standards, risk position and assurance across multiple countries and business operations.</p><p>The role will provide independent oversight of cybersecurity while working closely with Technology, IT and Engineering teams responsible for delivering and operating security solutions.</p><p>We are looking for a confident and practical cybersecurity leader who can influence without always having direct authority.</p><p>You will be comfortable challenging senior stakeholders, making decisions during high-pressure incidents and communicating clearly with Board-level audiences.</p><p>Experience protecting operational technology, production environments and critical supply chains will be particularly valuable.</p><p><br></p><p><strong>Key Responsibilities</strong></p><ul><li>Lead and develop the global cybersecurity strategy, roadmap, policies and standards.</li><li>Own the Group cybersecurity risk register and overall security posture.</li><li>Provide independent assurance that security controls are working effectively.</li><li>Act as the senior cybersecurity advisor to the Executive Committee, Audit Committee and Board.</li><li>Lead the response to major cyber incidents and act as Incident Commander when required.</li><li>Oversee vulnerability management, penetration testing, red-team exercises and security assessments.</li><li>Set security requirements for cloud, corporate IT and operational technology (OT).</li><li>Strengthen cybersecurity across production sites, packhouses, cold storage, farming and other operational environments.</li><li>Oversee SOC performance, detection capability and incident response requirements.</li><li>Manage third-party, supply-chain and acquisition-related cyber risk.</li><li>Ensure compliance with relevant regulations and standards, including ISO 27001, NIST, GDPR and NIS2.</li><li>Lead cyber risk due diligence for acquisitions and support post-acquisition integration.</li><li>Build security awareness and a strong security culture across global teams.</li><li>Lead and develop a small central cybersecurity team.</li></ul><p><strong>Requirements</strong></p><ul><li>12+ years' experience in cybersecurity, with at least 5 years in a senior leadership role.</li><li>Experience leading cybersecurity across multiple countries or business entities.</li><li>Strong experience in cybersecurity governance, risk and assurance.</li><li>Experience working in a model where security engineering and SOC operations sit within another function.</li><li>Proven experience leading major cyber incidents, including ransomware.</li><li>Strong knowledge of ISO 27001 and/or NIST CSF.</li><li>Practical experience with OT/ICS security, ideally in manufacturing, agriculture, food, logistics or another asset-intensive environment.</li><li>Experience with third-party risk, customer audits and regulatory requirements.</li><li>Experience supporting mergers, acquisitions and security integration.</li><li>Good understanding of cloud security, identity, network security and vulnerability management.</li><li>Relevant qualification such as CISSP, CISM or CRISC. OT security certifications are an advantage.</li><li>Excellent communication skills, with the ability to explain cyber risk in clear business and financial terms.</li><li>Fluent English and comfortable working across different countries and cultures.</li></ul><p><br></p><p>REF FL: V-218823</p>
<p><br></p><p>In this role you will:</p><ul><li>Conduct a review of trainer performance following completion of training & development programme to ensure delivery in line with approved training content and standards.</li><li>Responsible to ensure the day-to-day operations and maintenance of documented processes within security training.</li><li>Establish and maintain effective working relationships with internal and external stakeholders including third party customers, Group Security, Emirates Airport Services, dnata, Flight Operations Training, Flight Operations, Safety and Emergency Procedures, Service Delivery, Group Medical and Group Safety as applicable.</li><li>Review and update security related content and procedures in manuals to accurately reflect updates, requirements and best practices as per NCASTP, AOSP, AOSTP, IOSA, ISAGO and other relevant entities.</li><li>Review and maintain the relevant security training manuals and related standards, processes, and procedures.</li><li>Responsible to review, update and implement the relevant section of the Emirates Group Security Quality Assurance Programme training standards and procedures including document control, processes, reporting etc.</li><li>Review and approve security training material to ensure the content meets the needs of trainees and is in line with GCAA and other regulatory requirements.</li><li>Ensure timely updates and submission of all training material to the Training Manager - Security for final approval.</li><li>Plan and manage training manpower, schedule and resources based on requirements from internal and external stakeholders.</li><li>Ensure timely updates to the training schedule to incorporate demand changes and communicate with relevant parties.</li><li>Manage third party training requirements and correspondence, allocate training and liaise with Emirates Group Security Training Standards & Compliance team for attendance billing and certification processes.</li><li>Review and action audit and performance findings, identify reasons for operational noncompliance, maintain records of audit results and make recommendations as part of training needs analysis.</li></ul><p><strong>Desired Candidate Profile</strong></p><ul><li>Hold a completed Degree or Honours qualification (12+3 or equivalent).</li><li>A qualification in Aviation Security Management would be an advantage.</li><li>Bring a minimum of 5 years experience in Aviation Security and Training Operations and/or Training Delivery.</li><li>Hold a recognised Aviation Security certification and possess a sound understanding of aviation security principles, standards, and operational requirements.</li><li>Possess knowledge of international aviation security regulations and requirements, with the ability to interpret and apply regulatory standards, policies, and industry best practices.</li><li>Demonstrate experience in training course design, performance management, quality assurance, and continuous improvement initiatives within a training or operational environment.</li><li>Have knowledge of manpower planning and optimisation, including the effective scheduling and allocation of training resources to meet operational demands.</li><li>Be proficient in Microsoft Office applications and possess strong business writing, communication, and stakeholder management skills.</li></ul>
<h2 class="h5">Job description</h2>
<div class="t-break" data-jb-field="description">
<p><strong>Strategy</strong></p><br><ul><li>Support the translation of business strategies into security initiatives and high-level solution options aligned with enterprise architecture (EA), including service/application-based security postures and secure SDLC/CI-CD touchpoints.</li><li>Align policies and controls with regulatory requirements; plan control testing and drive remediation with stakeholders; define section-level requirements, policy touchpoints, and operating-model implications for changed/new services.</li><li>Maintain risk and readiness assessments; define response scenarios and recommend preventive and corrective actions, informed by blue-team/red-team exercises and lessons learned.</li><li>Lead periodic reviews of the information-security risk register and propose updates in coordination with stakeholders, ensuring identified risks are mitigated and audit observations are closed.</li><li>Set technical standards and operating procedures to embed security-by-design across systems and services; review project/change designs against security and EA standards and issue actionable recommendations covering cloud/on-premises patterns and integration controls.</li><li>Promote information-security awareness by preparing targeted materials and supporting focused sessions; research technology trends and automation (e.g., Security Operations Center Machine Learning use-cases) to inform roadmaps and awareness priorities.</li></ul><p><strong>Operations</strong></p><br><ul><li>Supervise the operation of the Security Operations Center (SOC) and monitor the response operations to security incidents and systems security in coordination with all internal and external stakeholders.</li><li>Act as Shift Lead or Operations Lead when required by overseeing SOC shift activities and ensuring proper handovers between shifts, monitoring team performance and task allocation,escalating critical incidents to management while coordinating response efforts, and ensuringadherence to SLAs, KPIs, and operational procedures throughout the shift.</li><li>Support SOC operations by analyzing and triaging events from the incident-response queue;coordinate consistent responses, assist with administering SIEM/SOAR/UBA/VM controls, and update/tune use cases, dashboards, and content.</li><li>Supervise the testing of controls against ISO 27001, ISR, and other standards; recommend and verify remediation, leveraging SDLC/CI-CD integration where applicable.</li><li>Assist in capturing and resolving IT security service requests and incidents per priorities and SLAs; enhance ticket handling by defining SOC metrics/KPIs and tracking them on operational dashboards.</li><li>Oversee the dissemination of threat intelligence from internal and external sources, including commercial Cyber Threat Intelligence (CTI) feeds (e.g., iSight, Looking Glass).</li><li>Support in the investigation of malware and intrusion attempts; perform log analysis and produce incident reports; enhance detection content within security tools to improve investigative depth.</li><li>Monitor security systems for anomalies and respond to potential events; prepare dashboards and presentations for stakeholders, including multi-tier SIEM/Splunk/data-lake views and KPI packs for security operations.</li></ul><p><strong>Product/Process Improvement</strong></p><br><ul><li>Develop and maintain security policies, standards, procedures, SOPs, and playbooks to protect information assets; incorporate enhanced SOC use-cases, content standards, and data-engineering patterns for logging/telemetry.</li><li>Track control effectiveness and compliance metrics, document lessons learned, and mentor junior staff on risk-assessment methodologies; produce audit artifacts and management reports; drive corrective actions.</li></ul> <p><strong>Job Qualifications & Requirements</strong></p><br><p><strong>Education</strong></p><br><ul><li>Bachelor's degree/ Master’s degree in Computer Science/Information Technology</li></ul><p><strong>Experience</strong></p><br><ul><li>3+ Years in case of Master’s degree (5+ years in case of Bachelor's Degree)</li></ul><p><strong>Qualification</strong></p><br><ul><li>Certifications such as GCIH, GCIA,SIEM certifications</li></ul> </div>
<p>We are seeking an experienced Cyber Security Consultant to complete customer cyber security pre-sales and service engagements. These engagements include cyber security risk assessment and delivering technical security integrations for mission-critical systems. In this role, you will advise customers and complete technical execution, ensuring that security solutions are properly integrated with Motorola Solutions systems and compliant with leading cyber security and risk frameworks.</p> <br> <b>Responsibilities</b> <ul> <li>Lead customer-facing cyber pre-sales activities and technical engagements with support from the wider pre-sales and cyber security teams<b>.</b> </li> <li>Execute customer-facing cyber risk assessments aligned with NIST CSF 2.0 and ISO 27001 frameworks</li> <li>Hands-on implementation and integration of Privileged Access Management (PAM), Security Information and Event Management (SIEM), and Vulnerability Management Systems (VMS) with Motorola Solutions systems, including WAVE and DIMETRA.</li> <li>Develop comprehensive Information Security Management Plans for customers, documenting compliance to international and national standards.</li> <li>Support organisation wide cyber security posture uplift activities, such as cyber awareness, service delivery processes and security of deployed Motorola Solutions systems.</li> </ul> <br> <b>Qualifications</b> <ul> <li>Approximately 8 10+ years of experience in IT/Field Engineering, with at least 4 years of dedicated experience in the cyber security field.</li> <li>Strong background in conducting Cyber Risk Assessments and developing Information Security Management Plans. - Deep, hands-on expertise in the deployment and integration of <b>PAM, SIEM, and/or Vulnerability Management </b>solutions.</li> <li>Industry-recognized certifications are strongly preferred (e.g., CISSP, GIAC, CySA+, GCFE, CompTIA Security+).</li> <li>Fluency in English (must).</li> <li>Fluency in Arabic (nice to have).</li> </ul> <br> <p> <b> Soft Skills </b> </p> <ul> <li>Excellent verbal communication skills in English, with the ability to translate complex technical concepts and risks into language that customers understand.</li> <li>Strong interpersonal skills, enabling effective collaboration across diverse geographical regions.</li> <li>Demonstrate initiative to take ownership over assigned objectives, with a keen attention to detail.</li> <li>Ability to handle multiple tasks concurrently.</li> <li>Proactive approach with enthusiasm for identifying and solving complex problems.</li> </ul> <br> <p>Willingness to travel across the AMEA region (particularly MEA) to oversee support project delivery requirements.</p> <br>Travel Requirements 25-50% <br>Relocation Provided None <br>Position Type Experienced<p> </p> Referral Payment Plan Yes<p> </p> <b>Company</b> Motorola Solutions UK Limited-DDA<p> </p> <p> <i> <b>EEO Statement</b> </i> </p> <p> </p> <p>Motorola Solutions is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion or belief, sex, sexual orientation, gender identity, national origin, disability, veteran status or any other legally-protected characteristic. </p> <p> </p> <p>We are proud of our people-first and community-focused culture, empowering every Motorolan to be their most authentic self and to do their best work to deliver on the promise of a safer world. If you d like to join our team but feel that you don t quite meet all of the preferred skills, we d still love to hear why you think you d be a great addition to our team.</p><p><strong>Desired Candidate Profile</strong></p><b>Experience & Qualifications</b> <ul> <li>Approximately 8 10+ years of experience in IT/Field Engineering, with at least 4 years of dedicated experience in the cyber security field.</li> <li>Strong background in conducting Cyber Risk Assessments and developing Information Security Management Plans. - Deep, hands-on expertise in the deployment and integration of <b>PAM, SIEM, and/or Vulnerability Management </b>solutions.</li> <li>Industry-recognized certifications are strongly preferred (e.g., CISSP, GIAC, CySA+, GCFE, CompTIA Security+).</li> <li>Fluency in English (must).</li> <li>Fluency in Arabic (nice to have).</li> </ul> <br> <p> <b> Soft Skills </b> </p> <ul> <li>Excellent verbal communication skills in English, with the ability to translate complex technical concepts and risks into language that customers understand.</li> <li>Strong interpersonal skills, enabling effective collaboration across diverse geographical regions.</li> <li>Demonstrate initiative to take ownership over assigned objectives, with a keen attention to detail.</li> <li>Ability to handle multiple tasks concurrently.</li> <li>Proactive approach with enthusiasm for identifying and solving complex problems.</li> </ul> <br> <p>Willingness to travel across the AMEA region (particularly MEA) to oversee support project delivery requirements.</p>
<h2 class="h5">Job description</h2>
<div class="t-break" data-jb-field="description">
<p>⠀</p><p>CAE’s Regional Security Manager Middle East, Asia Pacific and Sub-Saharan Africa reports to the CSO. The RSM leads regional security, crisis management, and business continuity activities, protecting employees, assets, information, facilities, and business operations while implementing corporate standards across the assigned geography.</p><br><br><p>• Physical security oversight: The role conducts site and accommodation security risk assessments, maintains regional security profiles, manages physical security providers, implements mitigation measures, and oversees regional security awareness training and clearances.</p><br><p>• Travel and executive protection: Responsibilities include managing journey-management vendors, developing travel security plans for high- and extreme-risk locations, and coordinating executive protection reviews covering venues, accommodations, routes, and transportation.</p><br><p>• Security plans: Produce security plans for events, country evacuation, or any other requirements. The RSM is responsible to produce and execute security plans in accordance with CAE Global Security format and standards.</p><br><p>• Investigation: The RSM must conduct several types of investigation accordingly to CAE Global Security’s policy and instructions governing the framework and parameters of investigation techniques and procedures.</p><br><p>• Intelligence and crisis response: The manager liaises with security agencies, embassies, and government intelligence organizations; leads incident response teams; develops evacuation and emergency plans; tests response strategies; and supports drills, tabletop exercises, business continuity, and rapid operational recovery.</p><br><br><p>Experience and capabilities:</p><br><p>• Bachelor's degree or higher from an accredited institution • Minimum of five (5) years combined experience in a corporate security and/or law enforcement environment and/or military investigative, intelligence, legal, or police role or equivalent corporate experience preferably in a risk-management function • Minimum of five (5) years combined experience conducting and/or directing investigations</p><br><p>• Previous training and experience managing the identification, investigation, and mitigation of sophisticated threat actors targeting protected information or technologies • Ability to work successfully in a matrixed, multicultural, multilingual environment • Strong interpersonal skills with the ability to bring disparate teams together in the successful pursuit of common objectives</p><br><p>Additional qualifications that could help you succeed even further in this role include</p><br><p>• Leadership role in a corporate security, legal, intelligence, counterintelligence, military, and/or law enforcement organization that includes international responsibilities • Work experience an established network of security contacts and contracts in the EMEA region • Experience in responding to international crises and directing an effective response • Clear communication in English and French, potentially Arabic Fluency • Advanced degree in a relevant field • Knowledge or ability and willingness to learn physical security assessment protocols and preventative measures</p><br><p>• Travel: May include up to 30% domestic and international travel</p><br><b>About CAE</b><p><i><span>At CAE, our mission is clear: to help make the world a safer place. For nearly 80 years, we’ve driven innovation in simulation, training, and mission readiness to support critical operations worldwide. By leveraging advanced technologies, we empower our customers to operate smarter, faster, and more sustainably. Join a purpose-driven organization where bold ideas are encouraged, collaboration drives progress, and your growth fuels our shared success.</span></i></p><br><p><b>Stay informed about recruitment scams.</b> Learn how to identify legitimate CAE communications and avoid fraudulent offers. <span><u>[Learn more →]</u></span></p><br><b>Position Type </b>Regular<b>Equal Opportunity & Accommodations</b><p><i><span>CAE is committed to providing equal opportunities to all applicants, regardless of race, nationality, color, religion, sex, gender identity or expression, sexual orientation, disability, neurodiversity, veteran status, age, or other characteristics protected by law. We encourage applicants who may not meet every qualification to apply. Reasonable accommodations are available—contact your recruiter or email </span></i><span><i><u><span>CAECarrieres-Careers@cae.com</span></u></i></span><i><span> if needed.</span></i></p><br><b>Data Privacy</b><p><span><u><span>Privacy Statement | CAE</span></u></span></p><br><p><i>As part of our process, we may use AI‑supported tools to help review applications, with human decision‑making at every step. CAE thanks all applicants for their interest. However, only those whose background and experience match the requirements of the role will be contacted.</i></p><br> </div>
<h2 class="h5">Job description</h2>
<div class="t-break" data-jb-field="description">
<br>Company Description<br><br><p>Fairmont Ajman is a beachfront 5-star hotel situated in Ajman, just 30 minutes away from the bustling metropolis of Dubai. Combining hospitality and elegance with a deep connection to our natural surrounds, Fairmont Ajman promises exceptional cultural, leisure and dining experiences in a truly spectacular setting. Featuring 252 guest rooms and suites complete with ample space and breathtaking views of the Arabian Gulf, Fairmont Ajman presents travelers with all the comforts of home, alongside world-class service.</p><br><br>Job Description<br><br><p>As a CCTV Operator with Fairmont Hotels & Resorts, you will play a vital role in maintaining the safety and security of our guests, Heartists, and hotel premises. Through your vigilance, attention to detail, and effective monitoring of surveillance systems, you will help ensure a safe and secure environment while upholding the highest standards of professionalism, confidentiality, and service excellence.</p><br><p>Key Responsibilities</p><br><ul><li>Monitor CCTV cameras and surveillance systems across the hotel, including guest areas, back-of-house facilities, entrances, exits, parking areas, and colleague accommodation where applicable.</li><li>Observe and identify suspicious activities, security breaches, safety hazards, and unusual incidents, reporting them promptly to the Security Supervisor or Security Manager.</li><li>Maintain continuous surveillance of designated areas to help prevent theft, unauthorized access, and other security incidents.</li><li>Monitor access control systems and report any unauthorized entry or suspicious movement within restricted areas.</li><li>Respond promptly to security alerts, alarms, and requests for assistance, coordinating with the security team and relevant departments as required.</li><li>Record, document, and report incidents accurately in accordance with hotel security procedures.</li><li>Review and retrieve CCTV footage when required for investigations, incidents, or management requests, ensuring all requests are properly authorized.</li><li>Maintain the confidentiality and integrity of surveillance footage, security records, and other sensitive information.</li><li>Ensure all CCTV equipment, monitors, recording systems, and related security devices are functioning correctly.</li><li>Report technical faults, camera blind spots, recording failures, or other system irregularities to the Security Supervisor and relevant technical support team.</li><li>Maintain accurate logs of incidents, observations, system faults, and shift handovers.</li><li>Assist in investigations involving security incidents, accidents, loss prevention, and violations of hotel policies, as directed by authorized management.</li><li>Support emergency response procedures by monitoring relevant areas and communicating information to the security team during fire alarms, evacuations, medical emergencies, or other critical situations.</li><li>Ensure compliance with hotel security policies, standard operating procedures, and applicable data protection and privacy requirements.</li><li>Maintain professional conduct, alertness, and discretion at all times while on duty.</li><li>Attend departmental briefings, training sessions, and security meetings as required.</li><li>Perform any other reasonable duties assigned by the Security Supervisor or Security Manager.</li></ul><br>Qualifications<br><br><ul><li>High school diploma or equivalent qualification.</li><li>Previous experience in CCTV monitoring, security operations, or a similar role, preferably within a hotel or hospitality environment.</li><li>Knowledge of CCTV surveillance systems, video recording equipment, and access control systems.</li><li>Basic computer skills and the ability to operate security monitoring software.</li><li>Good command of spoken and written English; additional languages are an advantage.</li><li>Knowledge of security procedures, incident reporting, and emergency response protocols.</li><li>Relevant UAE security training or licensing, where required by applicable regulations.</li></ul><br>Additional Information<br><br><p><strong>What is in it for you:</strong></p><br><ul><li>Comprehensive medical coverage as per company policy.</li><li>Enjoy meals on duty.</li><li>All Heartist Card offering discounted room rates at Accor Worldwide for you, your family and friends.</li><li>Enjoy special discounts at our restaurants and outlets.</li><li>Benefit from a wide range of learning opportunities and development programs through our Academy.</li><li>Build your career with opportunities to grow within the hotel and explore exciting career paths across Accor’s global network.</li><li>Get involved in meaningful corporate social responsibility activities and contribute positively to our community and the world around us.</li></ul><p><strong>Our commitment to Diversity & Inclusion:</strong></p><br><p>We are an inclusive company, and our ambition is to attract, recruit and promote diverse talent.</p><br><p>Diversity & Inclusion for Accor means welcoming each and everyone and respecting their differences by giving priority only to qualities and skills in extending employment and development opportunities. Our ambition is to provide meaningful employment, a warm and welcoming culture, excellent working conditions and to promote the development of all people, including those with disabilities.</p><br><p>When applying, do not hesitate to let us know of any specific needs you may have so that we can take them into consideration.</p><br><p><strong><em>Why work for Accor?</em></strong></p><br><p>We are far more than a worldwide leader. We welcome you as you are and you can find a job and brand that matches your personality. We support you to grow and learn every day, making sure that work brings purpose to your life, so that during your journey with us, you can continue to explore Accor’s limitless possibilities.</p><br><p>By joining Accor, every chapter of your story is yours to write and together we can imagine tomorrow's hospitality. Discover the life that awaits you at Accor, visit https://careers.accor.com/</p><br><p>Do what you love, care for the world, dare to challenge the status quo! #BELIMITLESS</p><br> </div>
<strong>Job Description<br><br></strong>We are looking for a Principal Security Engineer with deep crypto domain expertise to lead security across our regulated digital-asset business. As we build out spot trading, custody, staking and on-chain services for our client base, security is the foundation the whole business stands on. This role owns it.<br><br>You will be the security owner for our crypto platform's custody and on-chain layer end to end: architecture, engineering, operations and regulatory assurance for the parts of the stack that are unique to digital assets. For platform capabilities already owned by central security teams (cloud, application security, IAM, SOC), you'll define the crypto-specific requirements and partner on delivery rather than duplicate ownership. You will work closely with risk, compliance, product and engineering, and report into the central security function.<br><br>This is a hands-on senior role for someone who understands that in digital-asset custody, a single key-management failure is a firm-ending event, and who builds controls accordingly.<br><br><strong>Key Responsibilities<br><br></strong><strong>Digital asset and custody security (owned by this role):<br><br></strong><ul><li>Own the full custody stack: MPC key management, transaction authorisation, signing quorums, address whitelisting and withdrawal controls</li><li>Govern hot/cold wallet segregation, key ceremonies and delegated cold custodians</li><li>Secure staking architecture and on-chain deposit/withdrawal paths<br><br></li></ul><strong>Platform, cloud and application security (partner with InfraSec, AppSec and IAM):<br><br></strong><ul><li>Define crypto-specific hardening requirements for the custody and exchange stack within the existing multi-account AWS environment; partner with InfraSec on account segmentation, network and data-residency controls</li><li>Partner with AppSec to embed crypto-specific checks into the SDLC (SAST, DAST, SCA, CI/CD security gates) for custody and exchange services</li><li>Partner with IAM and IAM Tech on privileged access and secrets governance for crypto signing keys and custody credentials<br><br></li></ul><strong>Threat detection, response and testing (partner with SOC, CorpSec and AppSec):<br><br></strong><ul><li>Define custody- and blockchain-specific detection use cases and feed them into SOC's monitoring and alerting</li><li>Own incident response for crypto-specific scenarios (key compromise, unauthorised transaction, on-chain incident); partner with CorpSec on the group-wide IR process, forensics and breach notification</li><li>Contribute custody- and blockchain-specific scenarios into AppSec's pentest and red-team programme<br><br></li></ul><strong>Third-party and vendor security (own crypto vendor risk, partner with CorpSec on process):<br><br></strong><ul><li>Own security assessment and ongoing assurance of the crypto vendor stack: custody platforms, execution systems, blockchain analytics, Travel Rule and treasury tooling</li><li>Apply CorpSec's vendor onboarding and contract security process to crypto vendor engagements<br><br></li></ul><strong>Regulatory, resilience and governance (own crypto-specific mapping, partner with IT Governance):<br><br></strong><ul><li>Own control mapping against MiCA and the crypto-specific provisions of DORA and FCA rules; partner with IT Governance on ISO 27001, SOC 2, NIST CSF and GDPR mapping</li><li>Feed crypto services into the group's BC/DR and important-business-service mapping owned by IT Governance</li><li>Maintain crypto-specific security policy addenda; support regulatory and IT audits on crypto scope<br><br></li></ul><strong>Required Qualifications:<br><br></strong><ul><li>6+ years in information security, including recent experience as a senior security engineer, security architect, or security lead;</li><li>Direct experience securing crypto, digital-asset custody, or a regulated financial platform; strong understanding of blockchain security, wallet architecture and key management;</li><li>Working knowledge of cloud security fundamentals (AWS preferred, Azure/GCP acceptable) in a regulated environment;</li><li>Practical knowledge of security in regulated finance and how controls map to licence conditions (ISO 27001, SOC 2, NIST);</li><li>Experience running threat modelling, risk assessments and incident response;</li><li>Comfortable operating in a matrixed security model - partnering with dedicated IAM, AppSec, SOC and infrastructure security teams rather than owning those functions outright<br><br></li></ul><strong>Nice to have:<br><br></strong><ul><li>Hands-on Kubernetes, containers, API security and infrastructure as code;</li><li>Python proficiency for automation and scripting;</li><li>Experience running third-party / vendor security assurance;</li><li>Recognised certifications: CISSP, CISM, CCSP, or equivalent;</li><li>Hands-on experience with MPC - based custody, key ceremonies and signing-policy design;</li><li>Familiarity with MiCA, DORA, FCA crypto rules, or comparable digital-asset regimes;</li><li>Background in secure SDLC and DevSecOps (OWASP, secure-by-design);</li><li>Experience with smart contract security review: threat modelling, commissioning and managing external audits, and driving findings through to resolution;</li><li>Experience designing transaction signing and approval flows, so that what a user or operator authorises is provably what gets signed and broadcast;</li><li>Experience reviewing business logic in the money path - withdrawal sequencing, balance idempotency, internal ledger integrity - where the flaw sits in the logic rather than the cryptography;</li><li>Familiarity with supply-chain assurance for crypto-specific dependencies: wallet SDKs, chain libraries, node clients and signing tooling, including pinning, provenance and upgrade discipline;</li><li>Experience defining bug bounty scope for crypto assets, and triaging and calibrating severity for on-chain findings<br><br></li></ul><strong>Soft Skills:<br><br></strong><ul><li>Strong analytical and problem-solving skills;</li><li>Able to translate technical risk into business and regulatory impact;</li><li>Able to explain security risks and mitigations to non-security teams and to regulators;</li><li>Cross-functional collaboration with risk, compliance, product and engineering teams;</li><li>Clear documentation and communication skills<br><br></li></ul><strong>What You Will Get in Return:<br><br></strong><ul><li>Competitive Salary: We believe great work deserves great pay. Your skills and talents will be rewarded with a salary that makes you feel valued and motivated</li><li>Work-Life Harmony: Join a company that genuinely cares about you, because your life outside of work matters just as much as your time on the clock.</li><li>Generous Time Off: Need a breather? Our annual leave policy lets you recharge and enjoy life outside of work without a worry</li><li>Employee Referral Program: Love working here? Share the love. Bring your talented friends on board and get rewarded for growing our team</li><li>Comprehensive Health & Pension Benefits: From medical insurance to pension plans, we’ve got your back. Plus location-specific benefits and perks</li><li>Workation Wonderland: Live your digital nomad dreams with 30 extra days to work remotely from anywhere in the world (some restrictions apply)</li><li>Volunteer Days: Take two additional paid days each year to support causes you care about and give back to the community<br><br></li></ul>Be a key player at the forefront of the digital assets movement, propelling your career to new heights. Join a dynamic and rapidly expanding company that values and rewards talent, initiative and creativity. Work alongside one of the most brilliant teams in the industry.<br><br>We may use artificial intelligence (AI) tools to support parts of the hiring process, such as reviewing applications, analyzing resumes, or assessing responses. These tools assist our recruitment team but do not replace human judgment. Final hiring decisions are ultimately made by humans. If you would like more information about how your data is processed, please contact us.<br><br>Job Details<br><br>Role Level: Not Applicable Work Type: Full-Time Country: United Arab Emirates City: Dubai Company Website: capital.com Job Function: Cybersecurity Company Industry/<br><br>Sector: Financial Services<br><br>What We Offer<br><br><strong>About The Company<br><br></strong>Searching, interviewing and hiring are all part of the professional life. The TALENTMATE Portal idea is to fill and help professionals doing one of them by bringing together the requisites under One Roof. Whether you're hunting for your Next Job Opportunity or Looking for Potential Employers, we're here to lend you a Helping Hand.<br><br>Report<br><br>Disclaimer: talentmate.com is only a platform to bring jobseekers & employers together. Applicants are advised to research the bonafides of the prospective employer independently. We do NOT endorse any requests for money payments and strictly advice against sharing personal or bank related information. We also recommend you visit Security Advice for more information. If you suspect any fraud or malpractice, email us at abuse@talentmate.com.
Senior Security Operations Engineer (Security Operations & AI-Driven Defense)
Information Technology
We’re not hiring a security engineer to keep up with threats. We’re hiring someone to make threats irrelevant before they become incidents.<br><br>Most security teams react. They tune SIEM rules after the alert fires. They write playbooks after the incident closes. They patch after the scan flags. At Deriv, we’re building an autonomous security operations platform that hunts proactively, responds automatically, and learns continuously. Real money, real regulations, real consequences — and a security function built to match.<br><br><strong>Why This Matters<br><br></strong>Deriv’s mission is Trading for Anyone, Anywhere, Anytime. Millions of traders across the globe, around the clock, across regulatory environments. At this scale, a misconfigured WAF rule or undetected lateral movement isn’t a technical inconvenience — it’s a trader’s funds at risk and a regulator on the phone.<br><br>Our Security Operations team isn’t defending a perimeter. We’re protecting a living, distributed system that processes transactions 24/7. When the threat surface never sleeps, your detection and response capabilities can’t either — which is exactly why we’re embedding AI and automation at every layer of the security stack.<br><br><strong>Why Deriv<br><br></strong>We’re already in production, not planning:<br><br><ul><li>Automated security review on every pull request — continuous code-level scanning, not quarterly audits</li><li>Dozens of fraud detection models running continuously in production, protecting real transactions at scale</li><li>AI-driven anomaly detection across identity, endpoint, and network telemetry</li><li>400+ internal users on our workflow orchestration platform — including security response workflows<br><br><br></li></ul><strong>Scope of Work<br><br></strong>You’ll own outcomes across Security Operations with focus on four areas:<br><br><ul><li>Threat Detection & Response — SIEM optimisation, EDR/XDR tuning, incident investigation, threat hunting </li><li>AI-Driven Defence — Anomaly detection models, UEBA, automated triage, phishing detection pipelines</li><li>Security Hardening — Cloud security posture (AWS, GCP, Azure), WAF/CDN configuration, SSO and IAM policy enforcement</li><li>Cross-functional Security — Integrating controls into engineering workflows, CI/CD pipelines, and DevOps processes<br><br><br></li></ul><strong>What You’ll Do<br><br></strong><strong>Detect and Hunt<br><br></strong><ul><li>Build detection logic that fires early: Extend SIEM custom rules, AI-powered anomaly baselines, and automated alert enrichment that reduce noise and surface what matters. </li><li>Run threat hunts with hypotheses, not hunches: Use behavioural analytics, log forensics, and threat intelligence to surface adversarial activity hiding below the alert threshold.</li><li>Tune signal, not noise: Optimise EDR/XDR configurations to cut false positives and make attack visibility actionable — not overwhelming.<br><br><br></li></ul><strong>Automate the Response<br><br></strong><ul><li>Replace manual triage with intelligent playbooks: Build incident response automation that contains threats in minutes, not hours. </li><li>Encode institutional knowledge into systems: When a senior analyst’s six-step response becomes a runbook, you turn it into a workflow that runs at 3am without them.</li><li>Ship real-time visibility: Build automated dashboards tracking detection coverage, active incidents, misconfiguration trends, and policy compliance — for the team and for leadership.<br><br><br></li></ul><strong>Harden the Perimeter<br><br></strong><ul><li>Review configurations before attackers do: Run security assessments across cloud, endpoint, network, and application layers — mapping gaps against MITRE ATT&CK, CIS, and NIST benchmarks. </li><li>Enforce Zero Trust in practice, not just policy: Work with IT and Engineering to close IAM gaps, apply least privilege across cloud workloads, and strengthen MFA and conditional access controls.</li><li>Protect the build pipeline: Ensure container security, CI/CD guardrails, and automated compliance scanning prevent vulnerabilities from reaching production.<br><br><br></li></ul><strong>Who You Are<br><br></strong><ul><li>8+ years in security operations — incident response, threat detection, or blue team work. You know what attacks actually look like in logs, not just textbooks. </li><li>Your SIEM is a weapon, not a logging system: You write custom detection rules, tune thresholds, and build correlation logic. You’ve reduced false positives by an order of magnitude at least once.</li><li>You automate before you escalate: Python, Bash, or Terraform is how you respond to repetitive problems. When a manual step happens twice, you script it the third time.</li><li>You understand AI’s role in security — and its limits: You’ve worked with ML-based anomaly detection, UEBA, or AI-driven phishing models. You know where they catch things humans miss, and where they need guardrails.</li><li>You secure cloud environments at scale: AWS, GCP, or Azure — you’ve reviewed posture, implemented compliance scanning, and closed misconfigurations before they became incidents.</li><li>You communicate risk, not just findings: You translate technical exposure into decisions that reach engineering leads and executives without losing accuracy.</li><li>Certifications are a signal, not a requirement: CISSP, GSEC, AWS Security Specialty, or equivalent. What matters is what you’ve actually built and stopped.<br><br><br></li></ul><strong>Tech Stack<br><br></strong><ul><li>Languages & Automation: Python, Bash, Terraform </li><li>SIEM / Detection: Custom rule logic, AI-driven anomaly baselines, automated alert triage</li><li>Endpoint: EDR/XDR platforms, UEBA, behavioural analytics</li><li>Identity & Access: Okta, Google Workspace, Azure AD — SSO, MFA, conditional access</li><li>Cloud: AWS, GCP, Azure — security posture management, automated compliance scanning</li><li>Perimeter: WAF/CDN hardening, API abuse prevention, bot mitigation<br><br><br></li></ul><strong>The Honest Reality<br><br></strong>This is demanding work. You’ll build systems that catch threats your colleagues haven’t seen yet — and raise findings that aren’t always welcome. You’ll tune detections where a 1% miss rate means real exposure in a regulated environment. You’ll balance moving fast in engineering culture with the security controls that make speed sustainable.<br><br>But you’ll build security operations that actually catch things — continuously, automatically, at scale. Automated security review already ships on every PR. Fraud models run in production. The investment in AI-driven defence is real, not a slide deck.<br><br>If you want to maintain existing tools and respond to tickets, this isn’t it. If you want to build security systems that render entire threat categories obsolete, it might be.
<strong>About Edge<br><br></strong>At EDGE bold ideas are engineered into technologies that protect, improve and save lives.<br><br>Headquartered in the United Arab Emirates, EDGE is a leading advanced technology group working at the forefront of defence and emerging technologies. Spanning more than 35 specialised companies and multiple centres of excellence, we are purpose-built to move fast. Free from heavy legacy processes, we give our people the autonomy, accountability, and agility to bring breakthrough technologies from concept to reality.<br><br>Based in Abu Dhabi, a globally connected hub at the crossroads of Europe, Asia, Africa, and the Middle East, EDGE is home to a truly multicultural community where bold ideas thrive, and the future is shaped.<br><br>Together, we are shaping the future.<br><br><strong>About The Role<br><br></strong><strong>BEACON RED</strong> is seeking a Security Researcher to conduct hands-on security assessments of IT products, embedded systems, firmware, hardware devices, and software solutions. In this role, you will perform vulnerability analysis, reverse engineering, and attack-based security evaluations to identify weaknesses and assess security risks. As a Security Researcher at <strong>BEACON RED</strong>, you will work closely with senior researchers to execute testing activities, analyze findings, document results, and contribute to risk-based security recommendations.<br><br><strong>Responsibilities<br><br></strong><ul><li>Perform security evaluations of software, firmware, embedded systems, hardware devices, and IT products.</li><li>Conduct vulnerability analysis, penetration testing, reverse engineering, and logical attack assessments.</li><li>Execute software and hardware security testing activities, including firmware analysis and embedded device security assessments.</li><li>Support Side-Channel Analysis (SCA), Fault Injection (FI), debug interface testing, and cryptographic implementation testing.</li><li>Collect, analyze, and document technical evidence and testing results.Identify vulnerabilities, assess attack vectors, and evaluate security risks.</li><li>Demonstrate security weaknesses and contribute to technical reports and risk-based conclusions.Apply industry-standard cybersecurity testing methodologies and best practices.</li><li>Stay current with emerging threats, attack techniques, and security research trends.<br><br></li></ul><strong>Basic Qualifications<br><br></strong><ul><li>Bachelor’s degree in Computer Engineering, Information Security, Cybersecurity, or a related field.</li><li>Minimum 5 years of experience in cybersecurity evaluation, penetration testing, vulnerability research, software security assessment, hardware security testing, embedded systems security, reverse engineering, or secure product development.</li><li>Hands-on experience in one or more areas including firmware analysis, fuzzing, logical attack testing, exploit development, debug interface testing, Side-Channel Analysis (SCA), Fault Injection (FI), cryptographic implementation testing, and embedded device security testing.</li><li>Good understanding of cybersecurity standards, testing methodologies, vulnerability assessment, and penetration testing practices.</li><li>Awareness of ISO/IEC 17025 and security evaluation processes.</li><li>Relevant certifications, training, or equivalent practical experience such as CEH, OSCP, hardware security, embedded systems security, reverse engineering, or SCA/FI<br><br></li></ul><strong>Preferred Qualifications<br><br></strong><ul><li>Master’s degree in Cybersecurity, Applied Cryptography, or a related field.</li><li>2+ years of experience in accredited Common Criteria (CC) evaluation laboratories.</li><li>Experience leading EAL4+ evaluations.</li><li>ISO/IEC 17025 Internal Auditor certification.</li><li>Professional certifications such as CISSP, CISA, GPEN, GWAPT, or equivalent.</li><li>Specialized training in cryptography, hardware security, or security evaluation.</li><li>Proficiency in Arabic, Hindi, or Urdu.<br><br></li></ul><strong><strong>WHY CHOOSE EDGE<br><br></strong></strong>Launched in November 2019, the UAE's EDGE is one of the world's leading advanced technology groups, established to develop agile, bold and disruptive solutions for defence and beyond, and to be a catalyst for change and transformation. It is dedicated to bringing breakthrough innovations, products, and services to market with greater speed and efficiency, to position the UAE as a leading global hub for future industries, and to creating clear paths within the sector for the next generation of highly skilled talent to thrive.<br><br>At EDGE, the real investment goes beyond compensation. Through our dedicated learning academy and digital learning platforms, employees have access to extensive opportunities to develop new skills, deepen their expertise, and advance their careers. Combined with the freedom to innovate, strong career support, and the opportunity to collaborate with world-class talent from across the globe, EDGE is a place where you can continue to grow, keep learning, and turn ambitious ideas into meaningful outcomes.<br><br>Working at EDGE also comes with a package that genuinely reflects how much we value our people. Salaries are highly competitive and tax-free and, depending on your role and seniority, benefits can include family visas, annual flight tickets, medical insurance for you and your dependents, and education allowances for your children.<br><br><strong><strong>CANDIDATE PRIVACY & EQUAL OPPORTUNITY STATEMENT<br><br></strong></strong>If you feel your skills, experience and potential are a strong match for a role, we encourage you to apply even if you don’t meet every requirement. We are genuinely interested in what you can bring to EDGE.<br><br>Any information you share as part of your EDGE candidate profile or job application will be handled in accordance with applicable data protection and privacy regulations.<br><br>EDGE is an equal opportunity employer committed to building a diverse, inclusive, and high-performing workforce. We believe every individual deserves to be treated with fairness, respect and dignity, and our employment decisions reflect that. We do not discriminate based on race, colour, nationality, ethnicity, religion, gender, marital status, age, disability, pregnancy or parental status, or any other characteristic protected by applicable law.<br><br>As a global organisation, effective collaboration across international teams is central to how we work, so English proficiency is required for all roles unless otherwise stated in the job posting.<br><br>Please note that EDGE does not accept unsolicited resumes from recruitment agencies. Any resumes in the absence of a formally executed agreement in place will be deemed the property of EDGE, and no placement fees or compensation will be payable in respect of such submissions.
<strong>About The Role<br><br></strong>We are looking for an experienced and proactive<strong>Senior IT Systems Administrator / IT Operations Engineer</strong>to manage, maintain, and improve our corporate IT infrastructure.<br><br>You will take hands-on ownership of IT operations across infrastructure, security, automation, and end-user support. The ideal candidate solves problems independently, simplifies processes, and remains composed during incidents and outages.<br><br>Key Responsibilities<br><br><strong>Infrastructure & Network Operations<br><br></strong><ul><li>Manage and maintain corporate networks, servers, endpoints, and cloud services.</li><li>Configure, troubleshoot, and secure firewalls, switches, VPNs, and enterprise Wi-Fi.</li><li>Configure and maintain monitoring, alerting, and health checks across infrastructure, networks, endpoints, and critical services.</li><li>Troubleshoot infrastructure and security incidents, minimize downtime, and implement improvements to prevent recurrence.<br><br></li></ul><strong>Identity, Access & Device Management<br><br></strong><ul><li>Administer identity providers, single sign-on (SSO), user access, and device management solutions.</li><li>Design and implement automated employee onboarding and offboarding workflows.</li><li>Manage device deployment, software distribution, endpoint security, and compliance.</li><li>Provide technical support to employees across Windows, macOS, and Linux environments.<br><br></li></ul><strong>Automation & Operational Improvement<br><br></strong><ul><li>Automate repetitive IT tasks using scripts, integrations, and workflows.</li><li>Identify opportunities to improve IT reliability, security, scalability, and operational efficiency.</li><li>Maintain IT documentation, operational procedures, and security standards.<br><br></li></ul><strong>Security & Risk Management<br><br></strong><ul><li>Implement and maintain organization-wide security policies and controls across infrastructure, endpoints, identities, and cloud services.</li><li>Identify security risks and implement preventive and corrective measures.</li><li>Strengthen security through access controls, endpoint protection, vulnerability management, and system hardening.<br><br></li></ul><strong>IT Assets & Procurement<br><br></strong><ul><li>Own the end-to-end IT asset lifecycle, including procurement, inventory, deployment, and disposal.</li><li>Manage vendor selection, purchasing, and deployment of IT equipment and services.</li><li>Manage SaaS/PaaS applications, licenses, and integrations.<br><br></li></ul><strong>Required Technical Skills<br><br></strong><strong>Networking<br><br></strong><ul><li>Strong hands-on experience with Fortinet FortiGate firewalls, FortiSwitch, and FortiAP.</li><li>Experience configuring and troubleshooting enterprise Wi-Fi, VPNs, and network connectivity.<br><br></li></ul><strong>Operating Systems<br><br></strong><ul><li>Expert-level Windows and macOS administration.</li><li>Strong Linux knowledge.<br><br></li></ul><strong>Identity & Access Management<br><br></strong><ul><li>Hands-on experience with Google Workspace, Microsoft Entra ID, and JumpCloud.</li><li>Solid understanding of SAML 2.0, OIDC, and SCIM.<br><br></li></ul><strong>Automation & Scripting<br><br></strong><ul><li>Strong practical skills in PowerShell, Bash, and Python.</li><li>Proven experience building and maintaining automation for onboarding, offboarding, and daily IT operations.</li><li>Ability to write, understand, and troubleshoot scripts independently.<br><br></li></ul><strong>Cloud Platforms<br><br></strong><ul><li>Proven hands-on experience with at least one major cloud provider: Microsoft Azure, AWS, or GCP.</li><li>Experience managing cloud infrastructure, identity and access management, networking, and security.</li><li>Experience administering SaaS/PaaS applications, licenses, and integrations.<br><br></li></ul><strong>Security Engineering<br><br></strong><ul><li>Practical experience implementing security controls and organization-wide security policies.</li><li>Experience with endpoint protection, access management, vulnerability management, and security hardening.</li><li>Strong understanding of least privilege, Zero Trust principles, and security best practices.<br><br></li></ul><strong>Monitoring & Alerting<br><br></strong><ul><li>Hands-on experience configuring monitoring dashboards, health checks, and actionable alerts.</li><li>Experience with open-source monitoring solutions or platforms such as Datadog, Dynatrace, New Relic, Grafana Cloud, Prometheus, or similar tools.</li><li>Ability to identify key operational metrics and troubleshoot issues using monitoring data.<br><br></li></ul><strong>Virtualization & Device Management<br><br></strong><ul><li>Experience with Microsoft Hyper-V.</li><li>Experience with MDM solutions, endpoint security, device compliance, and software deployment.</li><li>Experience maintaining IT asset inventories.<br><br></li></ul><strong>Preferred Skills & Qualifications<br><br></strong><ul><li>Advanced or professional-level cloud certifications, such as:</li><ul><li>Microsoft Azure Solutions Architect Expert</li><li>AWS Solutions Architect Professional</li><li>Google Professional Cloud Architect</li></ul><li>Experience with VMware virtualization technologies.</li><li>Experience designing and improving IT infrastructure architecture, reliability, and scalability.</li><li>Familiarity with security frameworks and standards such as ISO 27001, NIST, or CIS Benchmarks.</li><li>Experience integrating IT systems through APIs and event-driven automation.<br></li></ul>Core Competencies<br><br><ul><li>Excellent communication skills and a customer-focused approach to IT support.</li><li>Strong troubleshooting, analytical thinking, and problem-solving abilities.</li><li>Ability to prioritize effectively and make sound decisions during incidents and outages.</li><li>Strong ownership, attention to detail, and ability to work independently.</li><li>Experience managing IT procurement from vendor selection through deployment.</li><li>A proactive approach to improving IT reliability, security, and operational efficiency.<br><br></li></ul>What We Value<br><br>We value people who go beyond keeping systems running: those who identify opportunities for improvement, take initiative, and use automation to make IT operations more reliable, secure, and scalable.
Job Title: Senior Threat Hunting Methodology Specialist<p><strong>Location:</strong> United Arab Emirates (Remote)</p><p><strong>Employment Type:</strong> Full-Time</p><p><strong>Work Arrangement:</strong> 100% Remote — Work From Home</p><p><strong>Level:</strong> Senior</p>About the Role<p>We are seeking a Senior Threat Hunting Methodology Specialist to develop, refine, and oversee proactive cybersecurity threat hunting methodologies that help organizations identify hidden threats, suspicious activities, and advanced adversary behavior. The role focuses on designing structured hunting frameworks, developing analytical hypotheses, evaluating security telemetry, and improving the effectiveness of threat detection capabilities.</p><p>The successful candidate will combine expertise in threat intelligence, security analytics, adversary behavior, and detection engineering to strengthen organizational security monitoring and incident response. This position is fully remote and involves authorized analysis of security data within approved environments.</p>Key Responsibilities<ul><li>Develop and maintain structured threat hunting methodologies, frameworks, procedures, and operational standards.</li><li>Design hypothesis-driven hunting strategies based on threat intelligence, emerging attack techniques, and organizational risk exposure.</li><li>Map threat hunting activities to the MITRE ATT&CK framework and relevant adversary tactics, techniques, and procedures.</li><li>Analyze endpoint, network, cloud, identity, application, and authentication telemetry to identify suspicious behavior.</li><li>Develop advanced hunting queries, analytical rules, and investigative workflows using available security platforms.</li><li>Identify gaps in existing security monitoring and recommend improvements to detection coverage.</li><li>Evaluate threat hunting effectiveness through measurable indicators, including detection quality, investigation outcomes, and coverage improvements.</li><li>Establish repeatable hunting processes for identifying persistence, privilege escalation, lateral movement, credential abuse, and data exfiltration.</li><li>Correlate security events across multiple data sources to identify complex attack patterns and potential indicators of compromise.</li><li>Integrate threat intelligence into hunting strategies and prioritize investigations based on relevance and potential impact.</li><li>Collaborate with SOC analysts, incident responders, detection engineers, and cybersecurity architects.</li><li>Review completed investigations and translate findings into new detection opportunities and defensive recommendations.</li><li>Develop standardized documentation for hunting hypotheses, data requirements, queries, findings, and escalation procedures.</li><li>Support continuous improvement of SIEM, EDR, XDR, and security analytics capabilities.</li><li>Conduct retrospective analysis of security incidents to identify missed detection opportunities.</li><li>Prepare technical reports and management summaries covering threat trends, hunting outcomes, and security improvement priorities.</li><li>Mentor junior threat hunters and promote consistent analytical practices across cybersecurity teams.</li></ul>Qualifications and Experience<ul><li>Bachelor's or master's degree in Cybersecurity, Computer Science, Information Technology, Digital Forensics, or a related discipline.</li><li>Significant professional experience in threat hunting, security operations, cyber threat intelligence, incident response, or detection engineering.</li><li>Strong understanding of proactive threat hunting methodologies and hypothesis-driven investigation techniques.</li><li>Practical knowledge of the MITRE ATT&CK framework and adversary behavior analysis.</li><li>Experience analyzing endpoint, network, cloud, identity, and authentication security telemetry.</li><li>Proficiency with SIEM, EDR, XDR, and threat intelligence platforms.</li><li>Experience developing advanced queries using tools or languages such as KQL, SPL, SQL, or comparable technologies.</li><li>Knowledge of scripting and automation using Python, PowerShell, or Bash.</li><li>Understanding of common attack techniques, including credential theft, persistence, lateral movement, command-and-control activity, and data exfiltration.</li><li>Familiarity with threat intelligence frameworks, indicators of compromise, and adversary profiling.</li><li>Ability to correlate complex security events and identify patterns that may not trigger existing detection rules.</li><li>Experience developing detection use cases, analytical playbooks, and security monitoring improvements.</li><li>Strong analytical thinking, investigative judgment, and problem-solving capabilities.</li><li>Excellent technical documentation, reporting, and stakeholder communication skills.</li><li>Ability to manage multiple investigations independently in a fully remote environment.</li></ul>What We Offer<ul><li>100% remote working arrangement from within the applicable employment jurisdiction.</li><li>Competitive compensation aligned with experience and cybersecurity expertise.</li><li>Opportunities to contribute to advanced threat detection and cyber resilience initiatives.</li><li>Professional development in threat intelligence, detection engineering, and security analytics.</li><li>Collaboration with international teams across cybersecurity, incident response, and security operations.</li></ul>How to Apply<p>Interested candidates should submit an updated CV highlighting their experience in threat hunting methodology, adversary analysis, MITRE ATT&CK, security telemetry, detection engineering, and incident investigation.</p><p><strong>Application Subject:</strong> Application – Senior Threat Hunting Methodology Specialist (UAE Remote)</p><ul><li>Candidates should confirm applicable employment arrangements, residency requirements, and work authorization before accepting an offer. All threat hunting and security testing activities must be conducted within authorized environments and approved scopes. Regulated cybersecurity services, formal compliance attestations, and legal or regulatory representations must be undertaken by appropriately qualified and authorized professionals.</li></ul>
<p>We're excited to be partnering with a leading institution in the UAE that is building a digital-first, AI-enabled financial services organisation from the ground up. This is a unique opportunity to join at an early stage and help shape the technology, security, and infrastructure foundations of a business with significant institutional backing and long-term ambition.</p><p>If you're passionate about network and security infrastructure, cloud-first environments, zero-trust architecture, and building highly resilient platforms from the ground up, we'd love to hear from you.</p><p><br></p><p>As <strong>Network & Security Infrastructure Lead</strong>, you will set the strategy and architecture for critical connectivity and security infrastructure across a 100% cloud environment. This includes regulated connectivity, SWIFT infrastructure, UAE payment systems and CBUAE connectivity, the cloud-edge perimeter, workforce networking, and zero-trust access for both people and AI agents.</p><p>Working closely with Information Security, Cloud, Enterprise IT, AI Platform and Site Reliability Engineering teams, you will lead the team responsible for building and operating a software-defined infrastructure environment where changes are automated, version controlled, auditable, and delivered through established release pipelines.</p><p><br></p><p><strong>Key Responsibilities:</strong></p><p>• Own the strategy for the cloud-hosted SWIFT environment, including secure-zone architecture, gateways, cloud-HSM-backed controls and annual Customer Security Programme compliance.</p><p>• Lead connectivity to UAE payment systems and CBUAE services, ensuring environments are monitored, certified and failover-tested.</p><p>• Define the architecture and standards for network security, including next-generation firewalls, DDoS protection, intrusion detection and prevention, DNS security and edge controls.</p><p>• Establish a network-as-code operating model, with configuration held in version control, automated pre-deployment testing, drift detection and proven rollback capabilities.</p><p>• Lead the architecture for carrier interconnects, private cloud connectivity, office networking and connectivity to in-country cloud regions.</p><p>• Develop and govern zero-trust architecture across workforce, service and AI-agent access, including identity-aware connectivity, least-privilege access and privileged administrative pathways.</p><p>• Extend zero-trust principles to AI agents through per-agent identity, task-based access, mutually authenticated agent-to-tool traffic, behavioural traffic baselining and rapid quarantine controls.</p><p>• Drive highly automated vulnerability and remediation practices, using technology to monitor vulnerabilities, assess exposure and accelerate remediation through controlled release processes.</p><p>• Ensure network and security telemetry feeds effectively into SOC and observability platforms, supporting anomaly detection, incident response and operational resilience.</p><p>• Lead scheduled disaster recovery and failover exercises, ensuring appropriate evidence is retained for regulatory and audit purposes.</p><p>• Build and lead the Network & Security Infrastructure team, set technical direction, manage budgets and develop key technology, carrier and security-vendor relationships.</p><p><br></p><p><strong>Required Experience: </strong></p><p>• 8+ years' experience in network and security infrastructure, including experience setting strategy and leading technical teams within financial services or another highly regulated environment.</p><p>• Direct experience building or operating SWIFT infrastructure and Customer Security Programme compliance.</p><p>• Experience connecting to national payment systems, central-bank services or similarly regulated connectivity environments.</p><p>• Demonstrated experience implementing network-as-code, including infrastructure automation, version-controlled configuration and pipeline-based network changes.</p><p>• Deep network security engineering experience covering firewalls, DDoS protection, intrusion detection and prevention, segmentation and perimeter security.</p><p>• Strong working knowledge of Azure and AWS networking and private cloud connectivity.</p><p>• Strong understanding of zero-trust architecture, including identity-aware and least-privilege access.</p><p>• Experience with highly automated infrastructure operations, vulnerability management, patching or remediation.</p><p>• Experience using AI-assisted engineering or operations tooling with appropriate review, control and auditability.</p><p><br></p><p><strong>The technology landscape includes:</strong></p><p>• Cloud networking: Azure Virtual WAN, AWS Cloud WAN, ExpressRoute, Megaport, SD-WAN, DNS and load balancing.</p><p>• Security infrastructure: Palo Alto, Fortinet, Cloudflare, Azure DDoS Protection, intrusion detection/prevention, PKI and HSM-backed key management.</p><p>• Network as Code: Terraform, NetBox or Nautobot, Batfish, automated validation and drift detection.</p><p>• Regulated connectivity: SWIFT Alliance components, secure-zone architecture, CSP controls and payment-system connectivity.</p><p>• Zero Trust: ZTNA/SASE, Microsoft Entra, SPIFFE/SPIRE, Entra Agent ID, mutual TLS, Istio, Cilium/eBPF and privileged access controls.</p><p>• Observability & Operations: network telemetry, flow analysis, behavioural baselining, anomaly detection, SIEM/SOC integration and AI-assisted network operations.</p><p><br></p><p><strong>Qualifications</strong></p><p>• Bachelor's degree in Computer Science, Network Engineering or a related discipline.</p><p>• Network or security certifications such as CCNP/CCIE, NSE or PCNSE, or equivalent security qualifications, would be advantageous.</p><p>What We're Looking For</p>
<strong>Overview<br><br></strong>The <strong>Manager - AI & Automation</strong> is responsible for leading the design, development, deployment, governance, and continuous improvement of AI and automation capabilities within a multi-customer Managed Security Service Provider, or MSSP, Security Operations Center.<br><br>The role combines technical leadership, security operations, AI engineering, service management, customer engagement, and people management. The manager will lead a multidisciplinary team responsible for developing and operating AI agents, agentic workflows, security automation, SOAR playbooks, detection engineering solutions, and AI-assisted incident response capabilities.<br><br><strong>The Role Has Two Primary Areas Of Focus<br><br></strong><ul><li>AI for Security: Applying AI, agents, automation, orchestration, and machine learning to improve alert triage, investigation, threat hunting, detection engineering, incident response, reporting, and SOC efficiency.</li><li>Security for AI: Protecting AI applications, agents, models, retrieval systems, APIs, tools, data, and supporting infrastructure against misuse, unauthorized access, data leakage, prompt injection, excessive agency, model manipulation, and supply-chain risks.<br><br></li></ul>The manager is accountable for ensuring that AI-enabled SOC capabilities are secure, reliable, explainable, auditable, cost-effective, tenant-aware, and governed through appropriate Human-in-the-Loop and Human-on-the-Loop controls.<br><br><strong>Responsibilities<br><br></strong>AI and Automation Service Leadership<br><br><ul><li></li><li> Translate the AI and automation strategy into roadmaps, engineering backlogs, delivery plans, and measurable outcomes.</li><li>Manage the delivery and continuous improvement of AI agents, agentic workflows, integrations, SOAR playbooks, and security automation.</li><li>Prioritize initiatives based on security value, customer impact, operational risk, analyst effort, scalability, complexity, and cost.<br><br></li></ul>Vendor-Agnostic Agent Engineering<br><br><ul><li>Lead the architecture and hands-on development of enterprise-grade AI agents and agentic workflows for security operations.</li><li>Build agents from scratch using a vendor-agnostic approach, avoiding unnecessary dependency on a single model provider, cloud platform, orchestration product, or security vendor.</li><li>Design solutions that allow models, tools, data sources, prompts, and orchestration components to be replaced or upgraded with limited impact.</li><li>Apply abstraction layers, standard interfaces, structured outputs, reusable tools, model gateways, and portable integration patterns.</li><li>Evaluate and select agent development frameworks based on the use case, security requirements, maintainability, performance, licensing, and operational cost.</li><li>Develop agents using common frameworks such as Agno, LangChain, LangGraph, Google Agent Development Kit, OpenAI Agents SDK, and Mastra.</li><li>Guide the design of single-agent and multi-agent architectures for triage, enrichment, investigation, threat hunting, detection engineering, case management, reporting, and response recommendations.</li><li>Ensure agents preserve customer context, tenant boundaries, evidence traceability, and decision history.</li><li>Integrate agents with SIEM, SOAR, EDR/XDR, NDR, cloud security, identity, email security, threat intelligence, vulnerability management, ITSM, and collaboration platforms.<br><br></li></ul>Secure Development and Production Operations<br><br><ul><li>Establish secure development practices covering version control, peer review, automated testing, secrets management, CI/CD, staged deployment, change control, and rollback.</li><li>Define evaluation criteria for accuracy, groundedness, consistency, evidence quality, tool selection, action success, latency, resilience, security, and cost.</li><li>Ensure agents are tested against incomplete, ambiguous, conflicting, malicious, and customer-specific inputs.</li><li>Implement production safeguards such as execution boundaries, approval gates, rate limits, timeouts, circuit breakers, kill switches.</li></ul>
Receive email alerts for Security Guard Jobs in UAE jobs
You can cancel your email alert at anytime