cloud & identity security engineer Jobs in Cairo

cloud & identity security engineer

nawy now property consultant Jobs in Cairo

nawy now property consultant

property consultant

application security analyst Jobs in Cairo

application security analyst

beauty consultant - faces - egypt Jobs in Cairo

beauty consultant - faces - egypt

cyber security consultant

Accenture

<div>
 
 Title: Security Engineer Consultant - Cyber Fraud
 
 
 
 
 Location:  Cairo, Egypt
 
 
 
 
 Accenture Technology
 
 
 
 
 Through unmatched industry experience, leading technologies from our ecosystem partners and startups, and the largest delivery network in the world, we provide a powerful range of capabilities that can be tailored to our client&rsquo;s most complex business needs. With over 100 innovation hubs deployed around the world, we help clients continuously innovate at speed and at scale so they can outpace their peers. You will bring innovation, intelligence and industry experience together with the newest technologies to help clients innovate at scale and transform their businesses.
 
 
 
 Responsibilities
 
 
 
 
 <li>
 Conduct fraud risk assessments and cybercrime threat modeling across digital channels.
 
 </li>
 <li>
 Advise clients on fraud prevention frameworks, cyber controls, and detection strategies.
 
 </li>
 <li>
 Develop fraud risk management programs aligned with NIST, ISO 27001, and/or COBIT.
 
 </li>
 <li>
 Evaluate fraud management systems (e.g. SAS, Actimize, Falcon, RSA, ThreatMetrix).
 
 </li>
 <li>
 Analyze fraud trends (e.g. social engineering, ATO, phishing, deepfakes, mule accounts).
 
 </li>
 <li>
 Recommend cyber fraud detection rules, scoring models, or behavioral analytics techniques.
 
 </li>
 <li>
 Integrate cybersecurity measures (e.g. MFA, device ID, biometric verification, tokenization) into fraud controls.
 
 </li>
 <li>
 Support cyber investigations related to identity theft, insider fraud, or credential compromise.
 
 </li>
 <li>
 Collaborate with cybersecurity, IT, and legal teams on incident response plans and data breach scenarios.
 
 </li>
 <li>
 Support alignment with fraud-related regulatory expectations (e.g. SAMA, NCA, AML, CFF).
 
 </li>
 <li>
 Assist in preparing internal audit reports, compliance reviews, or regulator submissions.
 
 </li>
 <li>
 Stay up to date with fraud typologies and evolving cybercrime tactics.
 
 
 
 </li>
 
 Qualifications
 
 
 
 
 <li>
 Bachelor&rsquo;s degree in Cybersecurity, Computer Science, Risk Management, or related field.
 
 </li>
 <li>
 +5 years of experience in fraud risk, cybersecurity, digital payments, or financial crime.
 
 </li>
 <li>
 Knowledge of fraud platforms (e.g. Falcon, SAS, ThreatMetrix) and cybersecurity controls (e.g. SIEM, IAM).
 
 </li>
 <li>
 Experience in digital banking, e-commerce, fintech, or public sector is a plus.
 
 </li>
 <li>
 Certifications such as CFE, CISA, CISSP, CEH, or CRISC are highly desirable.
 
 </li>
 <li>
 Strong analytical, communication, and stakeholder management skills.
 
 
 
 </li>
</div>

Fraud Security Consultant

Deloitte

<div>
 
 Cyber Security I OT Cybersecurity Tech Lead, Cairo. Egypt
 
 
 
 
 Connect to your career at Deloitte.
 
 
 
 
 Deloitte
 
 
 ,
 
 established globally in 1845, is the world&rsquo;s largest and leading professional services firm, providing Audit &amp; Assurance, Tax &amp; Legal and Consulting and related services to public and private clients spanning multiple industries. Present in more than 150 countries, Deloitte is distinct in its ability to help clients solve their most complex problems, from strategy to implementation.
 
 
 Deloitte innovation hub (DIH) is a strategic initiative/priority established by Deloitte North &amp; South Europe (NSE) to support our ambition to become the leading business transformation partner of choice for our clients and to expand and scale our delivery footprint across EMEA. With access to a scaled, diverse, highly skilled, motivated, and engaged workforce, DIH is delivering complex technical solutions for clients&rsquo; most complex business problems, across Portfolios that include &lsquo;Strategy &amp; Transactions&rsquo;, &lsquo;Customer&rsquo;, &lsquo;Engineering, AI &amp; Data, &lsquo;Enterprise, Technology &amp; Performance&rsquo; and &lsquo;Cyber&rsquo;. DIH is aiming to become the destination for top talents in Egypt for a long, exciting career.
 
 
 We invest in outstanding people of diverse talents and backgrounds and empower them to achieve more than they could elsewhere. Our work combines advice with action and integrity. We believe that when our clients and society are stronger, so are we. Our organization has grown in scale and diversity, providing services across the region, with our shared culture remaining the same. We aim to help clients realize their ambitions, make a positive difference in society, and maximize the success of our people. This drive fuels the commitment and humanity that run deep through our every action.
 
 
 
 Connect to your opportunity.
 
 
 
 <ul>
 <li>
 Conduct comprehensive OT penetration testing and vulnerability assessments on industrial control systems, SCADA, and other OT environments.
 </li>
 <li>
 Identify, analyse, and exploit security weaknesses in OT networks, devices, and protocols.
 </li>
 <li>
 Develop and execute customised attack scenarios to simulate real-world cyber threats targeting OT systems.
 </li>
 <li>
 Perform detailed technical analysis of OT cyber threats, including malware, intrusion techniques, and threat actor tactics, techniques, and procedures (TTPs).
 </li>
 <li>
 Gather, analyse, and disseminate cyber threat intelligence relevant to OT environments to inform risk management and incident response.
 </li>
 <li>
 Collaborate with cross-functional teams including IT security, engineering, and operations to design and implement effective OT security controls.
 </li>
 <li>
 Provide technical guidance and recommendations to clients or internal stakeholders on OT security best practices and remediation strategies.
 </li>
 <li>
 Prepare detailed technical reports, including findings, risk assessments, and mitigation plans.
 </li>
 <li>
 Stay current with emerging OT security threats, vulnerabilities, and industry trends.
 
 
 </li>
 </ul>
 
 Connect To Your Skills And Professional Experience.
 
 
 
 To succeed in this role, you will need to match the following criteria:
 
 
 <ul>
 <li>
 Bachelor&rsquo;s degree in Computer Science, Cybersecurity, Engineering, or a related technical field.
 </li>
 <li>
 Minimum 7 years of experience in OT cybersecurity, with a strong focus on penetration testing and threat intelligence.
 </li>
 <li>
 In-depth knowledge of OT/ICS protocols (e.g., Modbus, DNP3, OPC, IEC 61850) and industrial control systems architecture.
 </li>
 <li>
 Proven expertise in OT penetration testing tools and methodologies.
 </li>
 <li>
 Strong understanding of cyber threat intelligence frameworks and experience analysing threat actor behaviour.
 </li>
 <li>
 Hands-on experience with vulnerability scanning, exploit development, and security assessment tools specific to OT environments.
 </li>
 <li>
 Familiarity with OT security standards and frameworks such as ISA/IEC 62443, NIST SP 800-82.
 </li>
 <li>
 Excellent analytical, problem-solving, and communication skills.
 </li>
 <li>
 Relevant certifications such as GIAC GICSP, OSCP, OSCE, or similar are highly desirable.
 </li>
 <li>
 Ability to work independently and as part of a multidisciplinary team.
 
 
 </li>
 </ul>
 
 Connect to your service line &ndash; Technology and Transformation
 
 
 
 Distinctive thinking, deep expertise, and collaborative working. That&rsquo;s what connects us. That&rsquo;s what makes us Deloitte. If you want to help solve some of the biggest challenges around, join us. Together, we&rsquo;ll make an impact that matters.
 
 
 
 Personal independence
 
 
 
 Regulation and controls are standard practice in our industry and Deloitte is no exception. These controls provide important legal protection for both you and the firm. We are subject to several audit regulations, one of which requires that certain colleagues abide by specific personal independence constraints. This can mean that you and your "Immediate Family Members" are not permitted to hold certain financial interests (shares, funds, bonds etc.) with audit clients of the firm. The recruitment team will provide further detail as you progress through the recruitment process.
 
 
 
 Connect to your Industry
 
 
 
 &ldquo;What attracted me to Deloitte were the endless opportunities and the collective experience of other like-minded individuals. Deloitte&rsquo;s clients include many of the world&rsquo;s largest organizations; I wanted to be part of a team that made a difference that I could be proud of.&rdquo; Dan, T&amp;T.
 
 
 
 Connect with your colleagues
 
 
 
 Location: Cairo. Egypt
 
 
 Your Work, Your Way: We call our hybrid working vision Deloitte Works. And it does. We trust you to make the right choices around where, when, and how you work. You&rsquo;ll be able to make decisions about how you work best, to be collaborative, learn from colleagues, share your experiences, build the relationships that will fuel your career and prioritize your wellbeing. Having great conversations with your team and your leadership paves the way for great collaborative ways of working.
 
 
 
 Our commitment to you
 
 
 
 Making an impact is more than just what we do: it&rsquo;s why we&rsquo;re here. So we work hard to create an environment where you can experience a purpose you believe in, the freedom to be you, and the capacity to go further than ever before.
 
 
 We want you. The true you. Your own strengths, perspective, and personality. So, we&rsquo;re nurturing a culture where everyone belongs, feels supported and heard, and is empowered to make a valuable, personal contribution. You can be sure we&rsquo;ll take your wellbeing seriously, too. Because it&rsquo;s only when you&rsquo;re comfortable and at your best that you can make the kind of impact you, and we, live for.
 
 
 Your expertise is our capability, so we&rsquo;ll make sure it never stops growing. Whether it&rsquo;s from the complex work you do, or the people you collaborate with, you&rsquo;ll learn every day. Through world-class development, you&rsquo;ll gain invaluable technical and personal skills. Whatever your level, you&rsquo;ll learn how to lead.
 
 
 
 Connect to your next step
 
 
 
 A career at Deloitte is an opportunity to develop in any direction you choose. Join us and you&rsquo;ll experience a purpose you can believe in and an impact you can see. You&rsquo;ll be free to bring your true self to work every day. And you&rsquo;ll never stop growing, whatever your level.
 
 
</div>

Deloitte Innovation Hub I Cyber Security I OT Cybersecurity Tech Lead, Cairo. Egypt

<div>
 
 Cyber Security I Incident Response Tech Lead
 
 
 ,
 
 
 Cairo. Egypt
 
 
 
 
 Connect to your career at Deloitte
 
 
 
 
 Deloitte
 
 
 ,
 
 established globally in 1845, is the world&rsquo;s largest and leading professional services firm, providing Audit &amp; Assurance, Tax &amp; Legal and Consulting and related services to public and private clients spanning multiple industries. Present in more than 150 countries, Deloitte is distinct in its ability to help clients solve their most complex problems, from strategy to implementation.
 
 
 Deloitte innovation hub (DIH) is a strategic initiative/priority established by Deloitte North &amp; South Europe (NSE) to support our ambition to become the leading business transformation partner of choice for our clients and to expand and scale our delivery footprint across EMEA. With access to a scaled, diverse, highly skilled, motivated, and engaged workforce, DIH is delivering complex technical solutions for clients&rsquo; most complex business problems, across Portfolios that include &lsquo;Strategy &amp; Transactions&rsquo;, &lsquo;Customer&rsquo;, &lsquo;Engineering, AI &amp; Data, &lsquo;Enterprise, Technology &amp; Performance&rsquo; and &lsquo;Cyber&rsquo;. DIH is aiming to become the destination for top talents in Egypt for a long, exciting career.
 
 
 We invest in outstanding people of diverse talents and backgrounds and empower them to achieve more than they could elsewhere. Our work combines advice with action and integrity. We believe that when our clients and society are stronger, so are we. Our organization has grown in scale and diversity, providing services across the region, with our shared culture remaining the same. We aim to help clients realize their ambitions, make a positive difference in society, and maximize the success of our people. This drive fuels the commitment and humanity that run deep through our every action.
 
 
 
 Connect to your opportunity.
 
 
 
 
 Responsibilities
 
 
 
 As a
 
 Digital Forensics Incident Response Tech Lead
 
 , you will be assisting clients with response to Cyber Incidents and getting back to business. This includes data leaks, ransomware, and unusual network traffic caused by cyber criminals, ranging from insider threats to nation-state sponsored hackers. Your role would also include the following responsibilities:
 
 
 <ul>
 <li>
 Technical investigations of cyber incidents: analysis of log files, Windows event logs (windows artifacts), Linux artifacts to correlations in EDR tooling, network monitoring tools and SIEM, example of toolsets that we typically work with are Splunk, Microsoft Security Suite and CrowdStrike Falcon. It&rsquo;s most important that you can apply knowledge about (windows) forensic artifacts in any platform we face at our clients.
 </li>
 <li>
 In-depth analysis of malware, threat intelligence and other relevant sources.
 </li>
 <li>
 Tactical support such as advice on triage, containment, eradication, and broader coordination in cyber incidents.
 </li>
 <li>
 Forensic analysis of systems and networks.
 </li>
 <li>
 Memory forensics.
 </li>
 <li>
 Performing Compromise Assessments and Threat Hunting projects in SIEM and EDR tooling.
 </li>
 <li>
 Creation of custom scripts (using python) for parsing special log files, data sets and images, etc.
 </li>
 <li>
 Creation of complex timelines based on findings and observations.
 </li>
 <li>
 Member of the broader Deloitte Response Team, adding CIR skills to the overall team that includes privacy, crisis management, crisis communication, forensic investigations, and ICS/OT.
 </li>
 <li>
 Part of the EMEA and Global technical incident responder community to build a strong network and share knowledge base.
 </li>
 <li>
 Flexible working hours to support the customer during high-impact incidents.
 
 
 </li>
 </ul>
 
 Connect To Your Skills And Professional Experience
 
 
 
 To succeed in this role, you need to have the following:
 
 
 <ul>
 <li>
 Master&rsquo;s or bachelor&rsquo;s degree in computer science (or related field).
 </li>
 <li>
 One or more Forensics Certifications such as GCIH, GCFE, GCFA, GNFA, GREM.
 </li>
 <li>
 At least 3 years of experience in Cyber Incident Response and digital forensics.
 </li>
 <li>
 Minimum 6 years of experience in Cyber Security domain
 </li>
 <li>
 Hands-on skills to perform sharp and in-depth analyzes, both using tooling such as EDR and network sensors, but also manual analysis, if the tools are not available.
 </li>
 <li>
 Affinity with offensive security work (pentesting etc.) is beneficial.
 </li>
 <li>
 Posses strong passion for ransomware intelligence and work well in challenging situations, you can see both the bigger picture, as well as the smallest traces
 </li>
 <li>
 Experience in systems and/or network administration is a highly advantageous.
 </li>
 <li>
 Ability to work under pressure and keep track of the big picture while performing in-depth analysis.
 </li>
 <li>
 Trust and Confidentiality in handling client sensitive information.
 </li>
 <li>
 Ability to prioritize and take ownership, even when in unchartered territory.
 
 
 </li>
 </ul>
 
 The Following Attributes Are Essential
 
 
 
 <ul>
 <li>
 Strong written, verbal and presentation skills.
 </li>
 <li>
 A willingness to work as part of a diverse team.
 </li>
 <li>
 A commitment to continuous improvement and lifelong learning.
 </li>
 <li>
 A passion for technology and a drive to deliver secure, high-quality solutions.
 </li>
 <li>
 Strong analytical and problem-solving skills.
 </li>
 <li>
 Excellent communication and interpersonal abilities.
 </li>
 <li>
 Ability to work effectively in a fast-paced and dynamic environment.
 </li>
 <li>
 Proactive and self-motivated with a keen attention to detail.
 
 
 </li>
 </ul>
 
 Connect to your service line &ndash; Technology and Transformation
 
 
 
 Distinctive thinking, deep expertise, and collaborative working. That&rsquo;s what connects us. That&rsquo;s what makes us Deloitte. If you want to help solve some of the biggest challenges around, join us. Together, we&rsquo;ll make an impact that matters.
 
 
 
 Personal independence
 
 
 
 Regulation and controls are standard practice in our industry and Deloitte is no exception. These controls provide important legal protection for both you and the firm. We are subject to several audit regulations, one of which requires that certain colleagues abide by specific personal independence constraints. This can mean that you and your "Immediate Family Members" are not permitted to hold certain financial interests (shares, funds, bonds etc.) with audit clients of the firm. The recruitment team will provide further detail as you progress through the recruitment process.
 
 
 
 Connect to your Industry
 
 
 
 &ldquo;What attracted me to Deloitte were the endless opportunities and the collective experience of other like-minded individuals. Deloitte&rsquo;s clients include many of the world&rsquo;s largest organizations; I wanted to be part of a team that made a difference that I could be proud of.&rdquo; Dan, T&amp;T.
 
 
 
 Connect with your colleagues
 
 
 
 Location: Cairo. Egypt
 
 
 Your Work, Your Way: We call our hybrid working vision Deloitte Works. And it does. We trust you to make the right choices around where, when, and how you work. You&rsquo;ll be able to make decisions about how you work best, to be collaborative, learn from colleagues, share your experiences, build the relationships that will fuel your career and prioritize your wellbeing. Having great conversations with your team and your leadership paves the way for great collaborative ways of working.
 
 
 
 Our commitment to you
 
 
 
 Making an impact is more than just what we do: it&rsquo;s why we&rsquo;re here. So we work hard to create an environment where you can experience a purpose you believe in, the freedom to be you, and the capacity to go further than ever before.
 
 
 We want you. The true you. Your own strengths, perspective, and personality. So, we&rsquo;re nurturing a culture where everyone belongs, feels supported and heard, and is empowered to make a valuable, personal contribution. You can be sure we&rsquo;ll take your wellbeing seriously, too. Because it&rsquo;s only when you&rsquo;re comfortable and at your best that you can make the kind of impact you, and we, live for.
 
 
 Your expertise is our capability, so we&rsquo;ll make sure it never stops growing. Whether it&rsquo;s from the complex work you do, or the people you collaborate with, you&rsquo;ll learn every day. Through world-class development, you&rsquo;ll gain invaluable technical and personal skills. Whatever your level, you&rsquo;ll learn how to lead.
 
 
 
 Connect to your next step
 
 
 
 A career at Deloitte is an opportunity to develop in any direction you choose. Join us and you&rsquo;ll experience a purpose you can believe in and an impact you can see. You&rsquo;ll be free to bring your true self to work every day. And you&rsquo;ll never stop growing, whatever your level.
 
 
</div>

Deloitte Innovation Hub I Cyber Security I Digital Forensics Incident Response Tech Lead, Cairo, Egypt.

<div>
 
 Connect to your career at Deloitte
 
 
 
 
 Deloitte
 
 , established globally in 1845, is the world&rsquo;s largest and leading professional services firm, providing Audit &amp; Assurance, Tax &amp; Legal and Consulting and related services to public and private clients spanning multiple industries. Present in more than 150 countries, Deloitte is distinct in its ability to help clients solve their most complex problems, from strategy to implementation.
 
 
 Deloitte innovation hub (DIH) is a strategic initiative established by Deloitte North &amp; South Europe (NSE) to support our ambition to become the leading business transformation partner of choice for our clients and to expand and scale our delivery footprint across EMEA. With access to a scaled, diverse, highly skilled, motivated, and engaged workforce, DIH is delivering complex technical solutions for clients&rsquo; most complex business problems, across portfolios that include &lsquo;Strategy &amp; Transactions&rsquo;, &lsquo;Customer&rsquo;, &lsquo;Engineering, AI &amp; Data, &lsquo;Enterprise, Technology &amp; Performance&rsquo; and &lsquo;Cyber&rsquo;. DIH is aiming to become the destination for top talents in Egypt for a long, exciting career.
 
 
 We invest in outstanding people of diverse talents and backgrounds and empower them to achieve more than they could elsewhere. Our work combines advice with action and integrity. We believe that when our clients and society are stronger, so are we. Our organization has grown in scale and diversity, providing services across the region, with our shared culture remaining the same. We aim to help clients realize their ambitions, make a positive difference in society, and maximize the success of our people. This drive fuels the commitment and humanity that run deep through our every action.
 
 
 
 Connect to your opportunity.
 
 
 
 At Deloitte, you will make a real impact by working on diverse projects and collaborating with experts to deliver innovative solutions. As an
 
 Offensive Security Senior Engineer
 
 , you will focus on adversary emulation and red teaming to simulate advanced persistent threats (APTs) and cyberattacks. Using frameworks like MITRE ATT&amp;CK, you will test the resilience of our security controls and incident response capabilities. Additionally, you will conduct penetration testing on web applications, mobile apps, APIs, and networks, using scripting, defense evasion techniques, and code review to identify and exploit vulnerabilities.
 
 
 
 Your Role Might Include All The Following
 
 
 
 
 Red Teaming and Penetration Testing
 
 
 
 <ul>
 <li>
 Lead red team engagements to emulate the TTPs of advanced adversaries, using frameworks like MITRE ATT&amp;CK and Caldera to simulate real-world attack scenarios.
 </li>
 <li>
 Design and execute complex attack chains, including initial access, privilege escalation, lateral movement, data exfiltration, and persistence, to test the effectiveness of security controls.
 </li>
 <li>
 Simulate sophisticated threats such as nation-state actors, ransomware groups, and insider threats to identify gaps in detection and response processes.
 </li>
 <li>
 Conduct penetration testing across web applications, networks, cloud environments, and internal systems to identify vulnerabilities and validate red team findings.
 </li>
 <li>
 Test for vulnerabilities in web applications (e.g., SQL injection, XSS, CSRF, IDOR, OWASP Top 10), mobile apps (iOS and Android), and APIs (REST, GraphQL, SOAP).
 </li>
 <li>
 Use tools like Burp Suite, OWASP ZAP, Frida, and MobSF to identify and exploit vulnerabilities in diverse attack surfaces.
 
 
 </li>
 </ul>
 
 Web Application Security
 
 
 
 <ul>
 <li>
 Conduct in-depth penetration testing of web applications to identify vulnerabilities such as SQL injection, cross-site scripting (XSS), cross-site request forgery (CSRF), insecure direct object references (IDOR), and other OWASP Top 10 issues.
 </li>
 <li>
 Test for business logic flaws, session management issues, and authentication/authorization vulnerabilities in web applications.
 </li>
 <li>
 Use tools like Burp Suite, OWASP ZAP, and manual techniques to identify and exploit web application vulnerabilities.
 
 
 </li>
 </ul>
 
 Scripting and Automation
 
 
 
 <ul>
 <li>
 Write and maintain custom scripts (e.g., in Python, PowerShell, Bash, or JavaScript) to automate attack techniques, payloads, and reconnaissance processes for web, mobile, and API testing.
 </li>
 <li>
 Build tools to streamline pentesting workflows, such as automated vulnerability scanning, exploitation, and post-exploitation activities.
 </li>
 <li>
 Create scripts to bypass web application firewalls (WAFs), evade detection, and test the resilience of blue team defenses.
 
 
 </li>
 </ul>
 
 Defense Evasion Techniques
 
 
 
 <ul>
 <li>
 Research and implement advanced defense evasion techniques to bypass endpoint detection and response (EDR), antivirus, WAFs, and other security solutions.
 </li>
 <li>
 Develop obfuscation methods for payloads and exploits to avoid detection by SIEM, IDS/IPS, and other monitoring tools.
 </li>
 <li>
 Stay updated on the latest evasion techniques and adapt strategies to simulate sophisticated adversaries targeting web applications and other systems.
 
 
 </li>
 </ul>
 
 Code Review &amp; Secure Development
 
 
 
 <ul>
 <li>
 Perform thorough code reviews to identify vulnerabilities in web applications, APIs, and mobile apps, focusing on languages such as Java, JavaScript, Python, PHP, or C#.
 </li>
 <li>
 Identify insecure coding practices, such as improper input validation, lack of output encoding, and insecure API integrations.
 </li>
 <li>
 Collaborate with development teams to provide actionable recommendations for secure coding practices and remediation of identified vulnerabilities.
 
 
 </li>
 </ul>
 
 Mobile and API Security
 
 
 
 <ul>
 <li>
 Perform penetration testing on mobile applications (iOS and Android) to identify vulnerabilities such as insecure storage, improper session handling, and weak authentication mechanisms.
 </li>
 <li>
 Assess API security (REST, GraphQL, SOAP) for issues like broken authentication, excessive data exposure, and lack of rate limiting.
 </li>
 <li>
 Use tools like Burp Suite, Frida, and MobSF to analyze mobile and API attack surfaces and develop exploits for identified vulnerabilities.
 
 
 </li>
 </ul>
 
 Connect To Your Skills And Professional Experience
 
 
 
 <ul>
 <li>
 Bachelor&rsquo;s degree in Cybersecurity, information technology, computer science, or a relevant degree.
 </li>
 <li>
 Minimum 3 to 7 years of hands-on experience in penetration testing, red teaming, or related offensive security roles.
 </li>
 <li>
 Analytical capabilities, critical thinking, and problem-solving mindset (ability to analyze complex data and information to identify key insights and trends).
 </li>
 <li>
 Proficient in English speaking and writing.
 </li>
 <li>
 Flexibility for travel and working hours.
 </li>
 <li>
 strong proficiency in web application pentesting tools such as Burp Suite, OWASP ZAP, and manual testing techniques.
 </li>
 <li>
 Proficiency in scripting languages such as Python, PowerShell, Bash, or JavaScript for automation and tool development.
 </li>
 <li>
 Deep understanding of defense evasion techniques, including bypassing WAFs, EDR, and AV solutions.
 </li>
 <li>
 Expertise in code review for identifying vulnerabilities in web applications, APIs, and mobile apps.
 </li>
 <li>
 Strong knowledge of mobile security testing tools (e.g., Frida, MobSF, Drozer) and API testing tools (e.g., Postman, Burp Suite).
 </li>
 <li>
 Familiarity with common pentesting tools like Metasploit, Nmap, Cobalt Strike, BloodHound, and Kali Linux.
 </li>
 <li>
 Understanding of cloud environments (AWS, Azure, GCP) and their associated attack vectors.
 
 
 </li>
 </ul>
 
 The Following Attributes Are Also Preferable
 
 
 
 <ul>
 <li>
 Relevant certifications such as OSCP, OSWE, OSEP, CRTO, CRTP, GWAPT, GXPN, or equivalent are a plus.
 </li>
 <li>
 Active participation in CTF competitions with demonstrated achievements.
 </li>
 <li>
 Experience with penetration testing of AI systems and Large Language Models (LLMs), including testing for vulnerabilities like prompt injection, data poisoning, model inversion, or adversarial attacks.
 </li>
 <li>
 Experience with adversary emulation frameworks like MITRE ATT&amp;CK or Caldera.
 </li>
 <li>
 Knowledge of secure software development lifecycle (SDLC) and DevSecOps practices.
 </li>
 <li>
 Contributions to the security community through blogs, tools, or conference talks.
 </li>
 <li>
 Familiarity with container security (Docker, Kubernetes) and serverless architectures.
 
 
 </li>
 </ul>
 
 Personal Independence
 
 
 
 Regulation and controls are standard practice in our industry and Deloitte is no exception. These controls provide important legal protection for both you and the firm. We are subject to several audit regulations, one of which requires that certain colleagues abide by specific personal independence constraints. This can mean that you and your "Immediate Family Members" are not permitted to hold certain financial interests (shares, funds, bonds etc.) with audit clients of the firm. The recruitment team will provide further detail as you progress through the recruitment process.
 
 
 
 Connect with your colleagues
 
 
 
 Location: Cairo, Egypt
 
 
 &ldquo;What attracted me to Deloitte were the endless opportunities and the collective experience of other like-minded individuals. Deloitte&rsquo;s clients include many of the world&rsquo;s largest organizations; I wanted to be part of a team that made a difference that I could be proud of.&rdquo; -Dan, Technology &amp; Transformation
 
 
 &ldquo;Everyone always says, &ldquo;it&rsquo;s the people,&rdquo; and that&rsquo;s true. Working for a brand you feel proud of feels pretty good too. And you don&rsquo;t have any stress about fitting into a particular stereotype, because there are so many different types of people in Deloitte Digital.&rdquo; &ndash; Gillian, Technology &amp; Transformation
 
 
 
 Our commitment to you
 
 
 
 Making an impact is more than just what we do: it&rsquo;s why we&rsquo;re here. So, we work hard to create an environment where you can experience a purpose you believe in, the freedom to be you, and the capacity to go further than ever before.
 
 
 We want you. The true you. Your own strengths, perspective, and personality. So, we&rsquo;re nurturing a culture where everyone belongs, feels supported and heard, and is empowered to make a valuable, personal contribution. You can be sure we&rsquo;ll take your wellbeing seriously, too. Because it&rsquo;s only when you&rsquo;re comfortable and at your best that you can make the kind of impact you, and we, live for.
 
 
 Your expertise is our capability, so we&rsquo;ll make sure it never stops growing. Whether it&rsquo;s from the complex work you do, or the people you collaborate with, you&rsquo;ll learn every day. Through world-class development, you&rsquo;ll gain invaluable technical and personal skills. Whatever your level, you&rsquo;ll learn how to lead.
 
 
 
 Connect to your next step
 
 
 
 A career at Deloitte is an opportunity to develop in any direction you choose. Join us and you&rsquo;ll experience a purpose you can believe in and an impact you can see. You&rsquo;ll be free to bring your true self to work every day. And you&rsquo;ll never stop growing, whatever your level.
 
 
</div>

Deloitte Innovation Hub | Cyber Security | Offensive Security Senior Engineer, Cairo, Egypt.

SWATX

<div>
 Role Overview
 
 
 The ideal candidate has deep experience in cybersecurity frameworks, risk management, regulatory
 
 
 alignment, audits, policy development, and leading enterprise GRC programs.
 
 
 The role includes working with government and regulated sectors, contributing to cybersecurity
 
 
 posture improvement, and ensuring client compliance with international and KSA-specific
 
 
 frameworks.
 
 
 This position is client-facing, leadership-oriented, and requires both strategic and hands-on GRC
 
 
 expertise.
 
 
 Top 5 Responsibilities
 
 
 <ul>
 <li>
 Lead GRC engagements including cybersecurity assessments, maturity evaluations, gap
 
 
 </li>
 </ul>
 analyses, and compliance improvement roadmaps.
 
 
 <ul>
 <li>
 Develop and implement cybersecurity governance frameworks, policies, procedures,
 
 
 </li>
 </ul>
 and standards aligned with ISO 27001, NCA ECC/CCC, NIST CSF, COBIT, and sector-
 
 
 specific mandates.
 
 
 <ul>
 <li>
 Conduct enterprise risk assessments, create risk treatment plans, and drive continuous
 
 
 </li>
 </ul>
 risk reduction programs with business stakeholders.
 
 
 <ul>
 <li>
 Manage internal/external audits, regulatory compliance initiatives, and coordinate with
 
 
 </li>
 </ul>
 client teams to ensure audit readiness and control effectiveness.
 
 
 <ul>
 <li>
 Provide strategic advisory on cybersecurity governance, operating models, KPIs, and
 
 
 </li>
 </ul>
 continuous improvement across government and enterprise environments.
 
 
 Must-Have Technologies &amp; Platforms Experience
 
 
 (Not technical hands-on configuration, but exposure in a GRC context)
 
 
 ∙SIEM / SOC Technologies: Microsoft Sentinel, Splunk, IBM QRadar
 
 
 ∙Network &amp; Security Platforms: Palo Alto, Fortinet, Cisco Security
 
 
 ∙EDR/XDR Platforms: CrowdStrike, Microsoft Defender XDR
 
 
 ∙Cloud Security: Microsoft Azure security controls, AWS Security Hub, CSP governance
 
 
 ∙GRC Tools: RSA Archer, ServiceNow GRC, MetricStream, OneTrust
 
 
 ∙Vulnerability Management: Tenable, Qualys, Rapid7
 
 
 Candidates must understand control requirements, governance, integration points, reporting
 
 
 outputs, and compliance mapping for these technology domains.
 
 
 Nice-to-Have Technologies
 
 
 ∙Knowledge of KSA-specific compliance platforms (NCA GRC portals, banking
 
 
 compliance portals)
 
 
 ∙Data Privacy and DLP Platforms (Microsoft Purview, Symantec, Forcepoint)
 
 
 ∙DevSecOps practices and CI/CD pipeline assessments
 
 
 ∙OT/ICS governance frameworks (NIST 800-82, IEC 62443)
 
 
 
 Required
 
 
 
 Required &amp; Preferred Certifications
 
 
 ∙ISO 27001 Lead Implementer (LI) or Lead Auditor (LA)
 
 
 ∙CGRC (formerly CAP) or equivalent risk-focused certification
 
 
 ∙CISM or CISSP (one required for Lead level)
 
 
 
 Preferred / Strong Plus
 
 
 
 ∙SABSA Foundation or Practitioner
 
 
 ∙COBIT 2019
 
 
 ∙ITIL 4 Foundation
 
 
 ∙NCA-specific training (ECC/CCC/CSM)
 
 
 ∙Cloud certifications: Azure Security Engineer, CCSK, CCSP
 
 
 
 Experience Requirements
 
 
 
 ∙7-10 years in cybersecurity governance, compliance, and risk management roles
 
 
 ∙Proven leadership in GRC project delivery with enterprise or government clients
 
 
 ∙Experience with KSA regulatory frameworks, such as:
 
 
 oNCA ECC v2 / CCC
 
 
 oSAMA CSF
 
 
 oCITC / CST Regulations
 
 
 oNDMO Data Governance
 
 
 ∙Experience designing cybersecurity programs and managing cross-domain teams
</div>

Cybersecurity GRC Expert

Honeywell

<div>
 
 Job Description
 
 
 
 The Network Security and Cyber Security Engineer is responsible for designing, implementing, and maintaining a robust and secure network infrastructure for the railway organization. This role requires a deep understanding of network security best practices, cybersecurity principles, and railway-specific security requirements to ensure the protection of critical systems and data.
 
 
 
 Responsibilities
 
 
 
 
 Key responsibilities:
 
 
 
 
 Network Security Architecture
 
 
 
 <ul>
 <li>
 Analyze the engineering project's network infrastructure and security requirements.
 </li>
 <li>
 Design and implement a comprehensive network security architecture, including firewalls, intrusion detection/prevention systems, virtual private networks (VPNs), and access control mechanisms.
 </li>
 <li>
 Ensure the network security architecture aligns with industry standards, regulatory requirements, and railway-specific security guidelines.
 </li>
 <li>
 Evaluate and select appropriate network security hardware, software, and tools to meet the engineering project's needs.
 
 
 </li>
 </ul>
 
 Cybersecurity Strategy And Implementation
 
 
 
 <ul>
 <li>
 Develop and implement a comprehensive cybersecurity strategy for the engineering project, covering areas such as threat detection, incident response, and vulnerability management.
 </li>
 <li>
 Implement advanced security controls, including endpoint protection, data encryption, and user access management.
 </li>
 <li>
 Ensure the integration of cybersecurity measures with the railway's operational technology (OT) systems, such as signaling, train control, and asset management.
 </li>
 <li>
 Collaborate with the engineering project's IT and OT teams to ensure a seamless and secure integration of systems and applications.
 
 
 </li>
 </ul>
 
 Threat Monitoring And Incident Response
 
 
 
 <ul>
 <li>
 Establish and maintain a robust security monitoring and incident response framework to detect, analyze, and mitigate cyber threats for the engineering project.
 </li>
 <li>
 Implement and manage security information and event management (SIEM) systems, security orchestration and automated response (SOAR) tools, and other security monitoring solutions.
 </li>
 <li>
 Develop and regularly test incident response and disaster recovery plans to ensure the engineering project's resilience against cyber attacks.
 </li>
 <li>
 Coordinate with the railway's security operations center (SOC) and incident response team to ensure timely and effective incident management for the engineering project.
 
 
 </li>
 </ul>
 
 Compliance And Regulatory Requirements
 
 
 
 <ul>
 <li>
 Ensure the engineering project's network and cybersecurity measures comply with relevant industry standards, regulations, and guidelines, such as the Railway Cyber Security Standard (RCSS), the National Institute of Standards and Technology (NIST) Cybersecurity Framework, and the General Data Protection Regulation (GDPR).
 </li>
 <li>
 Develop and maintain comprehensive documentation, policies, and procedures to support the engineering project's compliance efforts.
 </li>
 <li>
 Collaborate with regulatory bodies, industry associations, and external auditors to address compliance requirements and address any identified gaps.
 
 
 </li>
 </ul>
 
 Continuous Improvement And Innovation
 
 
 
 <ul>
 <li>
 Stay up-to-date with the latest trends, technologies, and best practices in network security and cybersecurity, particularly within the railway industry.
 </li>
 <li>
 Identify opportunities for improving the engineering project's network and cybersecurity capabilities and recommend appropriate solutions.
 </li>
 <li>
 Collaborate with the engineering project's IT, OT, and security teams to align the network and cybersecurity strategy with the organization's overall technology roadmap and business objectives.
 </li>
 <li>
 Provide technical guidance and mentorship to junior security engineers and team members working on the engineering project.
 
 
 </li>
 </ul>
 
 Qualifications
 
 
 
 
 You must have:
 
 
 
 <ul>
 <li>
 Bachelor's degree in Computer Science, Information Technology, or a related engineering field. A master's degree in Cybersecurity or a relevant discipline is preferred.
 </li>
 <li>
 3-5 years of experience as a Senior Network Security and Cyber Security Engineer, with a strong focus on the railway industry and engineering project-based work.
 </li>
 <li>
 Certified Cisco Certified Network Professional (CCNP) Security or Certified Cyber Operations Specialist (CCOS) certification, or equivalent.
 </li>
 <li>
 Extensive knowledge of network security technologies, protocols, and best practices, including firewalls, VPNs, intrusion detection/prevention, and access control.
 </li>
 <li>
 Proficient in implementing and managing advanced cybersecurity solutions, such as SIEM, SOAR, and endpoint protection.
 </li>
 <li>
 Thorough understanding of railway-specific security requirements, including signaling systems, train control, and asset management.
 
 
 </li>
 </ul>
 
 We Value
 
 
 
 <ul>
 <li>
 Strong project management skills and experience in leading complex network and cybersecurity engineering initiatives.
 </li>
 <li>
 Excellent problem-solving, analytical, and troubleshooting skills.
 </li>
 <li>
 Effective communication and collaboration skills to work with cross-functional engineering teams, including IT, OT, and security personnel.
 
 
 </li>
 </ul>
 
 About Us
 
 
 
 Honeywell helps organizations solve the world's most complex challenges in automation, the future of aviation and energy transition. As a trusted partner, we provide actionable solutions and innovation through our Aerospace Technologies, Building Automation, Energy and Sustainability Solutions, and Industrial Automation business segments &ndash; powered by our Honeywell Forge software &ndash; that help make the world smarter, safer and more sustainable.
</div>

ICT Network and Cyber Security Engineer

BAUER Group

<div>
 
 BAUER Spezialtiefbau GmbH
 
 is an international construction service provider whose primary focus is on complex specialist foundation engineering work in difficult ground conditions.
 
 
 
 Cyber Security Engineer (m/f/x)
 
 
 
 Job ID: req2235
 
 
 For our subsidiary BAUER Egypt S.A.E. in Egypt we are searching for a new IT team member as Cyber Security Engineer (m/f/x).
 
 
 
 Your tasks:
 
 
 
 <ul>
 <li>
 Analyze security incidents and breaches to identify root causes and perform forensic investigations
 </li>
 <li>
 Monitor security access and evaluate alerts from SIEM, IDS/IPS, and cloud security solutions
 </li>
 <li>
 Detect and assess anomalies and attack patterns across the Cyber Kill Chain
 </li>
 <li>
 Actively contain and mitigate malware propagation, C2 communication, exploits, infiltration attempts, and data leakage
 </li>
 <li>
 Continuously develop knowledge and skills by proactively learning new, job‑relevant security topics
 
 
 </li>
 </ul>
 
 Your profile:
 
 
 
 <ul>
 <li>
 Bachelor's / Master&rsquo;s degree in Computer Science, Information Technology or equivalent education
 </li>
 <li>
 Several years of experience in security operations (L2/L3), including hands‑on work with Microsoft Defender ATP, Nessus, Proofpoint, Azure Security, the Office 365 security suite, and common IDS/SIEM technologies; solid understanding of Microsoft platforms (e.g., IIS, MS SQL Server, Windows Server, Windows 11) and network fundamentals
 </li>
 <li>
 Relevant information security certifications preferred (e.g., CISSP, CISA) or technical security certifications such as CCSP or OSCP
 </li>
 <li>
 Strong analytical and communication skills combined with creative, out‑of‑the‑box problem‑solving abilities
 </li>
 <li>
 Ability to communicate fluently in English, both speaking and writing
 
 
 </li>
 </ul>
 
 We offer you:
 
 
 
 <ul>
 <li>
 Attractive remuneration package
 </li>
 <li>
 Medicine Reimbursement per year
 </li>
 <li>
 Rice Allowance
 </li>
 <li>
 Leave days (Vacation, Sick, Maternity, Paternity, Emergency)
 </li>
 <li>
 HMO - Health card for hospitalization
 
 
 </li>
 </ul>
 
 Your contact person:
 
 
 
 Marco Fischer, +49 (8252)97-3546
 
 
 The BAUER Group is a leading provider of services, equipment and products for ground and groundwater and generates total Group revenues of EUR 1.7 billion with around 12,000 employees.
 
 
 The Group's business activities are divided into three future-oriented segments: Construction, Equipment and Resources.
</div>

Cyber Security Engineer (m/f/x)

Explore 200+ Cyber security consultant in Cairo this March. Find roles across top companies and apply now to boost your career.