Information Security Consultant

Information Security Consultant

Location: Dubai
Job Type: Full-Time
Experience: 3–8 years in Information Security, Cybersecurity, or related domains

Role Overview

We are looking for an Information Security Consultant with strong hands-on experience across security governance, cloud security, SOC operations, and vulnerability management. The ideal candidate should be able to enhance the organization’s security posture, support compliance initiatives, and contribute to technical security assessments. A full match to every skill is not required, but candidates must demonstrate strong capability across most of the areas listed below.

Key Responsibilities

• Support and maintain ISO 27001 compliance, documentation, audits, and security controls.
• Implement and manage Data Loss Prevention (DLP) solutions.
• Work with Microsoft Purview and other compliance tools for data governance and risk reduction.
• Enhance and administer Azure security posture, including security configurations, monitoring, and remediation.
• Conduct digital forensics investigations, incident analysis, and reporting.
• Perform vulnerability assessments, remediation tracking, and risk reporting.
• Deploy, configure, and optimize SOC tools and solutions; assist SOC teams in analysis and incident response.
• Perform log fine-tuning and monitoring improvements across security systems.
• Test, implement, and enhance Endpoint Detection & Response (EDR) solutions.
• Support or conduct penetration testing and red teaming (internal or external engagements).

Required Skills (Strong proficiency in most of them)

• ISO 27001 Compliance
• Data Loss Prevention (DLP)
• Microsoft Purview & Compliance tools
• Azure Security Administration
• Digital Forensics
• Vulnerability Management
• SOC Solutions (Implementation + Analysis)
• Log Fine-Tuning
• EDR Solutions (Testing & Implementation)
• Penetration Testing / Red Teaming

Preferred Certifications

Candidates with any of the following certifications will be prioritized (not all required):

• SC-100 – Microsoft Cybersecurity Architect
• ISO 27001 Audit Associate
• Certified Ethical Hacker (CEH v12)
• DLP Administrator Certification
• SC-200 – Microsoft SOC Analyst
• AZ-500 – Microsoft Azure Security Engineer Associate
• Cloud Practitioner Certification
• SC-300 – Microsoft Identity & Access Administrator Associate

Ideal Candidate Profile

• Strong technical understanding of cloud, endpoint, and network security.
• Ability to work with minimal supervision and drive security initiatives.
• Strong documentation, analytical, and problem-solving skills.
• Exposure to enterprise security environments or consulting projects.

Job Type: Full-time

Pay: AED10,000.00 - AED20,000.00 per month

Application Question(s):

• How many years of hands-on experience do you have in Information Security (NOT IT support or networking)?
• Have you directly worked with ISO 27001 (implementation, audits, or compliance)?
• Have you implemented or managed any DLP solution (e.g., Microsoft, Symantec, Forcepoint)?
• Rate your experience with Azure Security (0–10).

What key configurations have you handled?

• Have you ever worked in a SOC environment (as an analyst or engineer)?
• Do you have practical experience with EDR platforms (CrowdStrike, Defender, SentinelOne, etc.)?
• Have you performed vulnerability assessments or penetration testing yourself (not just coordinating)?
• List the relevant certifications you currently hold from this list:

SC-100, SC-200, SC-300, AZ-500, CEH v12, ISO 27001, DLP Admin, Cloud Practitioner.

• What’s your notice period? What’s your expected salary range?