Design, implement, and maintain security controls across networks, systems, applications, and cloud platforms.
Monitor, analyze, and respond to security alerts, incidents, and vulnerabilities.
Deploy and manage endpoint security solutions, including EDR/XDR, DLP, and patch management.
Configure and manage network security, Web Application Firewalls (WAF), and email security solutions.
Perform vulnerability assessments and penetration testing (VAPT) and coordinate remediation activities with IT and infrastructure teams.
Support SIEM operations, including log analysis, alert triage, use-case tuning, and incident investigation.
Ensure secure configuration of operating systems through OS hardening, baseline controls, and security best practices.
Support Identity and Access Management (IAM), authentication mechanisms, encryption, and key management practices.
Assist with cloud security implementation and monitoring across AWS, Azure, and/or GCP environments.
Participate in incident response, root-cause analysis, forensic investigations, and post-incident reviews.
Maintain cybersecurity documentation, policies, procedures, and compliance evidence.
Stay current with emerging threats, vulnerabilities, and cybersecurity trends.
Bachelor's degree in Cybersecurity, Computer Science, Information Technology, or a related field (or equivalent practical experience).
Strong understanding of:
Security Operations Center (SOC) processes
Network security principles and architectures
Operating system security and hardening (Windows & Linux)
Identity and Access Management (IAM)
Encryption and secure communication protocols
Endpoint Detection & Response (EDR/XDR)
Data Loss Prevention (DLP)
Patch management solutions
Web Application Firewalls (WAF)
Email security gateways
SIEM platforms
Vulnerability scanning and VAPT tools
Working knowledge of Windows, Linux, and cloud platforms (AWS, Azure, GCP).
3–5 years of relevant cybersecurity experience in an enterprise or SOC environment.
CompTIA Security+ or CySA+
CEH (Certified Ethical Hacker) or GIAC certifications
IT Cybersecurity Engineer - NAFFCO GROUP - HQ Dubai, United Arab Emirates, United Arab Emirates - Naffco
Description
Job Summary
We are seeking a skilled and motivated IT Cybersecurity Engineer to design, implement, and operate security controls that protect the organization's IT infrastructure, systems, applications, and data. The ideal candidate will have strong hands-on experience with cybersecurity technologies, a solid understanding of network and system security, and the ability to detect, respond to, and remediate cybersecurity threats and incidents in an enterprise environment.