it specialist

senior consultant

implementation consultant

security supervisor

business consultant

cyber security consultant

CloudSEK

<div>
 <p>
  <strong>
   WHO ARE WE?
  </strong>
 </p>
 <p>
  We are a bunch of super enthusiastic, passionate, and highly driven people, working to achieve a common goal! We believe that work and the workplace should be joyful and always buzzing with energy!
 </p>
 <p>
  <strong>
   <u>
    CloudSEK,
   </u>
  </strong>
  one of India&rsquo;s most trusted Cyber security product companies, is on a mission to build the world&rsquo;s fastest and most reliable AI technology that identifies and resolves digital threats in real-time. The central proposition is leveraging Artificial Intelligence and Machine Learning to create a quick and reliable analysis and alert system that provides rapid detection across multiple internet sources, precise threat analysis, and prompt resolution with minimal human intervention.
 </p>
 <p>
  Founded in 2015, headquartered at Singapore, we are proud to say that we&rsquo;ve grown at a frenetic pace and have been able to achieve some accolades along the way, including:
 </p>
 <p>
  <br/>
 </p>
 <p>
  <strong>
   CloudSEK&rsquo;s Product Suite:
  </strong>
 </p>
 <ul>
  <li>
   CloudSEK
   <strong>
    XVigil
   </strong>
   constantly maps a customer&rsquo;s digital assets, identifies threats and enriches them with cyber intelligence, and then provides workflows to manage and remediate all identified threats including takedown support.
  </li>
  <li>
   A powerful Attack Surface Monitoring
   <strong>
   </strong>
   tool that gives visibility and intelligence on customers&rsquo; attack surfaces. CloudSEK's
   <strong>
    BeVigil
   </strong>
   uses a combination of Mobile, Web, Network and Encryption Scanners to map and protect known and unknown assets.
  </li>
  <li>
   CloudSEK&rsquo;s Contextual AI
   <strong>
    SVigil
   </strong>
   identifies software supply chain risks by monitoring Software, Cloud Services, and third-party dependencies.
  </li>
 </ul>
 <p>
  <br/>
 </p>
 <p>
  <strong>
   Key Milestones:
  </strong>
 </p>
 <ul>
  <li>
   <strong>
    2016
   </strong>
   : Launched our first product.
  </li>
  <li>
   <strong>
    2018
   </strong>
   : Secured Pre-series A funding.
  </li>
  <li>
   <strong>
    2019
   </strong>
   : Expanded operations to India, Southeast Asia, and the Americas.
  </li>
  <li>
   <strong>
    2020
   </strong>
   : Won the NASSCOM-DSCI Excellence Award for Security Product Company of the Year.
  </li>
  <li>
   <strong>
    2021
   </strong>
   : Raised $7M in Series A funding led by MassMutual Ventures.
  </li>
  <li>
   <strong>
    Awards &amp; Recognition
   </strong>
   : Won NetApp Excellerator's "Best Growth Strategy Award," CloudSEK XVigil joined NVIDIA Inception Program, and won the NASSCOM Emerge 50 Cybersecurity Award.
  </li>
  <li>
   <strong>
    2025
   </strong>
   : Secured $19 million in funding led by Tenacity Ventures, Commvault.
  </li>
 </ul>
 <p>
  <br/>
 </p>
 <p>
  <strong>
   About the Role
  </strong>
 </p>
 <ul>
  <li>
   Do you have a strong background and/or are actively passionate about
   <strong>
    offensive security and threat intelligence
   </strong>
  </li>
  <li>
   Do you love to
   <strong>
    ELI5 complex technical findings
   </strong>
   for diverse stakeholders, from SOC teams to CXOs and
   <strong>
    have excellent communication &amp; presentation skills
   </strong>
   to drive home business impact from these with confidence in high-stakes engagements.
  </li>
  <li>
   Are you hands-on with
   <strong>
    AI-driven automation
   </strong>
   in scaling your technical capacity?
  </li>
  <li>
   Do you love taking
   <strong>
    end-to-end responsibility for outcomes
   </strong>
   and thrive in a
   <strong>
    fast-paced, dynamic, self-driven and high-volume consulting environment?
   </strong>
  </li>
 </ul>
 <p>
  <br/>
 </p>
 <p>
  <strong>
   Note: People from red - teaming background will be preferred.
  </strong>
 </p>
 <p>
  <br/>
 </p>
 <p>
  CloudSEK&rsquo;s
  <strong>
   Security Consulting Threat Research &amp; Intelligence for Key Enablement (STRIKE)
  </strong>
  Division operates at the intersection of threat research, consulting, and business enablement. As a Security Consultant for the MEA market, you will wear multiple hats: a
  <strong>
   trusted technical advisor
  </strong>
  during trials, a
  <strong>
   threat researcher
  </strong>
  uncovering insights tailored to regional risks, a
  <strong>
   consulting partner
  </strong>
  driving adoption through clear business impact to help position CloudSEK to our client partners as a strategic ally in their cyber resilience journey, and a community builder to expand CloudSEKs footprint and visibility in the region.
 </p>
 <p>
  <br/>
 </p>
 <p>
  <strong>
   Key Responsibilities
  </strong>
 </p>
 <ul>
  <li>
   <strong>
    Technical Value Translation
   </strong>
  </li>
  <li>
   Lead new business
   <strong>
    trials and proof-of-capability (POC) engagements
   </strong>
   , ensuring successful demonstration of technical outcomes and translation of business impact by presenting CloudSEK&rsquo;s AI-driven predictive threat intelligence and infrastructure security capabilities to executives and security teams, bridging technical depth with business relevance.
  </li>
 </ul>
 <p>
  <br/>
 </p>
 <ul>
  <li>
   <strong>
    Threat Research &amp; Regional Intelligence
   </strong>
  </li>
  <li>
   Proactively track the Cyber Threat Landscape for the region.
  </li>
  <li>
   Investigate and track
   <strong>
    region-specific threats
   </strong>
   in MEA across government, telecom, BFSI, and enterprise sectors.
  </li>
  <li>
   Produce
   <strong>
    custom intelligence briefs, RFP responses, and exposure reports
   </strong>
   that highlight CloudSEK&rsquo;s proactive value.
  </li>
 </ul>
 <p>
  <br/>
 </p>
 <ul>
  <li>
   <strong>
    Partner Ecosystem Support
   </strong>
  </li>
  <li>
   Collaborate with
   <strong>
    partner security consultants
   </strong>
   to deliver onboarding, enablement, and co-selling activities.
  </li>
  <li>
   Act as a
   <strong>
    regional subject matter expert (SME)
   </strong>
   for partners, contextualizing CloudSEK&rsquo;s value within MEA threat landscapes.
  </li>
 </ul>
 <p>
  <br/>
 </p>
 <ul>
  <li>
   <strong>
    Thought Leadership &amp; Outreach
   </strong>
  </li>
  <li>
   Proactively build the CloudSEK community in the region by participating, contributing to as well as initiating and driving community events.
  </li>
  <li>
   Contribute to CloudSEK&rsquo;s
   <strong>
    lead generation efforts
   </strong>
   by creating research-driven reports and customer-facing intelligence insights.
  </li>
  <li>
   Represent CloudSEK at
   <strong>
    regional forums, webinars, and customer workshops
   </strong>
   , strengthening brand credibility.
  </li>
 </ul>
 <p>
  <br/>
 </p>
 <p>
  <strong>
   Requirements
  </strong>
 </p>
 <ul>
  <li>
   <strong>
    Experience in Cybersecurity &amp; Business-Oriented Consulting
   </strong>
   : Proven ability to lead and execute technical engagements (e.g., POCs, trials) and translate complex security concepts into clear business value for executives and technical teams.
  </li>
  <li>
   <strong>
    Expertise in Threat Intelligence and Research
   </strong>
   : Strong background in proactive cyber threat research, with specific knowledge of regional threat landscapes, particularly in the MEA region. Must be adept at producing custom intelligence briefs and insightful reports.
  </li>
  <li>
   <strong>
    Cross-Functional Collaboration and Partner Management
   </strong>
   : A collaborative mindset with experience working with and enabling a partner ecosystem. Must be a subject matter expert capable of supporting partners in co-selling and contextualizing solutions for regional markets.
  </li>
  <li>
   <strong>
    Demonstrated Thought Leadership and Communication Skills
   </strong>
   : A track record of creating research-driven content and insights for lead generation. Excellent public speaking and presentation skills to represent the company at regional events, webinars, and customer workshops.
  </li>
  <li>
   <strong>
    Proactive and Self-Driven
   </strong>
   : A highly motivated individual who can proactively identify, investigate, and address security threats, and take the initiative to build and grow the company's community and brand presence in the target region.
  </li>
 </ul>
 <p>
 </p>
</div>


Security Consultant - MEA

Solomon People Soluitons

<p>Freelance Trainer on CYBER SECURITY RISK ASSESSMENT AND MANAGEMENT TRAINING COURSE <b>(APPLY ONLY IF YOU ARE A TRAINER)</b></p><p>Course Overview Today&rsquo;s organizations do not just want IT controls; they demand justified, risk-based cyber security decisions. Whether you are approving a new system, moving to the cloud, engaging a third-party vendor, or rolling out a digital service, leaders are expected to understand the cyber implications and demonstrate that risks are assessed, prioritized, and managed. This course transforms cyber security risk assessment from a technical checklist into a practical management tool. Participants will not become penetration testers, but they will become disciplined evaluators of cyber exposure. They will learn how to identify critical assets, map threats and vulnerabilities, assess likelihood and impact, score and prioritize risks, and select cost-effective controls. Additionally, participants will align cyber risk decisions with legal, regulatory, and governance requirements and communicate risk clearly to executives and non-technical stakeholders. The course is hands-on, scenario-based, and tailored for leaders and managers who must integrate cyber risk thinking into projects, operations, and strategy.</p><p>By the end, participants will be equipped to ask better questions, challenge assumptions, and support their organizations in building a stronger security posture.</p><p>Target Audience This course is designed for professionals who regularly make or influence decisions that affect cyber security risk: This course is designed for: <b>IT managers and system owners responsible for critical applications and infrastructure </b> Information security and risk officers involved in cyber risk assessment and reporting <b>Compliance and governance professionals overseeing security, privacy, and regulatory requirements </b> Public sector staff managing digital services, citizen data, or national systems <b>NGO and development program leaders handling sensitive beneficiary and donor information </b> Procurement and vendor management teams evaluating third-party and cloud service providers <b>Finance and operations managers approving security budgets and investments </b> HR and people managers responsible for policies, access, and staff awareness <b>Project managers leading digital transformation, system upgrades, or new platforms </b> Anyone who must understand, explain, and justify cyber risk decisions to stakeholders</p><p>Learning Objectives This course equips you to identify, assess, prioritize, and manage cyber security risks in a structured, business-aligned way.</p><p>By the end of this course, you'll be able to: <b>Understand core principles of cyber security risk assessment and risk management </b> Identify critical assets, data, and processes that must be protected <b>Recognize common threats, vulnerabilities, and attack paths across sectors </b> Assess likelihood and impact to generate clear, comparable cyber risk ratings <b>Prioritize risk treatment options using structured, risk-based decision-making </b> Select and justify appropriate controls, safeguards, and mitigation measures <b>Communicate cyber risks and treatment plans clearly to technical and non-technical stakeholders </b> Align cyber risk decisions with legal, regulatory, and organizational governance frameworks</p><p>Professional and Organizational Impact When you think in terms of cyber risk, impact, and likelihood, you move from reacting to incidents to leading secure, informed decisions. As a participant, you will benefit by: <b>Improve your ability to interpret and explain cyber risk reports and dashboards </b> Gain confidence when challenging, approving, or defending cyber-related investments <b>Reduce guesswork and fear-driven decisions about security controls and tools </b> Strengthen your strategic planning by integrating cyber risk into project and portfolio decisions <b>Position yourself as a trusted partner between technical teams and senior leadership </b> Enhance your reputation as a risk-aware, security-conscious professional <b>Build your influence in digital transformation, compliance, and governance discussions </b></p><p><b>Organizations led by cyber risk thinkers are more resilient, trusted, and prepared for disruption. Your organization will benefit from: </b> Smarter use of security budgets and technology investments <b>More consistent, transparent, and documented cyber risk decisions </b> Stronger alignment between security controls and business priorities <b>Reduced likelihood and impact of incidents, breaches, and service disruptions </b> Faster and more coordinated response when an incident occurs <b>Improved compliance with regulations, standards, and audit expectations </b> Increased stakeholder confidence in how digital assets and data are protected</p><p>Training Methodology This is a practical, outcome-driven course designed to turn cyber security risk theory into daily decision-making power. Methodology includes: <b>Interactive cyber risk assessment exercises using realistic scenarios </b> Threat and vulnerability mapping for real-world systems and processes <b>Simple tools, checklists, and templates for risk registers and treatment plans </b> Role-playing for presenting cyber risk and treatment options to executives <b>Group work comparing different risk treatment strategies and control options </b> Case studies from public, private, and NGO environments, including breaches and lessons learned <b>Reflection prompts to challenge current security assumptions and habits Course Outline </b></p><p><b>MODULE 1: PRINCIPLES OF CYBER SECURITY RISK THINKING </b> What cyber risk is and why it matters beyond IT <b>Understanding assets, threats, vulnerabilities, impact, and likelihood </b> Cyber risk vs. information security vs. IT operations <b>When to apply cyber risk assessment in projects and operations </b> Common missteps in framing cyber risk as purely technical</p><p>MODULE 2: IDENTIFYING CRITICAL ASSETS, DATA, AND PROCESSES <b>Mapping business services, systems, and information flows </b> Classifying data by sensitivity, criticality, and regulatory requirements <b>Identifying 'crown jewels' and single points of failure </b> Considering people, technology, and third-party dependencies <b>Using asset registers and data inventories </b></p><p><b>MODULE 3: THREATS, VULNERABILITIES, AND EXPOSURE. </b> Common threat actors and tactics (internal and external) <b>Typical vulnerabilities in applications, infrastructure, and processes </b> Human factor risks: social engineering, weak practices, insider threats <b>Emerging risks from cloud, mobile, and remote work models </b> Simple techniques to map and visualize threat paths</p><p>MODULE 4: CYBER RISK ASSESSMENT AND SCORING <b>Qualitative vs. quantitative approaches to risk assessment </b> Estimating likelihood and impact with practical scales <b>Risk matrices, heat maps, and scoring models </b> Using scenarios and what-if analysis to test assumptions <b>Creating and maintaining a cyber risk register </b></p><p><b>MODULE 5: SELECTING AND EVALUATING SECURITY CONTROLS </b> Types of controls: preventive, detective, corrective, and compensating <b>Aligning controls with frameworks such as ISO 27001 or NIST CSF </b> Assessing control effectiveness and control gaps <b>Balancing usability, cost, and security requirements </b> Prioritizing controls based on risk reduction and value for money</p><p>MODULE 6: CYBER RISK MANAGEMENT IN PROJECTS AND CHANGE INITIATIVES <b>Integrating risk assessment into system development and procurement </b> Evaluating cloud services, third-party platforms, and outsourcing arrangements <b>Security requirements in contracts and service level agreements </b> Managing risk during digital transformation and system upgrades <b>Case examples from public, NGO, and corporate projects </b></p><p><b>MODULE 7: GOVERNANCE, COMPLIANCE, AND REGULATORY EXPECTATIONS </b> The role of policies, standards, and governance structures <b>Data protection, privacy, and sector-specific regulations </b> Documentation, evidence, and audit readiness <b>Roles and responsibilities: boards, executives, IT, and business units </b> Aligning cyber security with enterprise risk management</p><p>MODULE 8: HUMAN FACTORS AND SECURITY CULTURE <b>Why people are both the weakest link and strongest defense </b> Designing effective awareness and training programs <b>Policy design that supports, rather than frustrates, staff </b> Handling user resistance and fatigue toward security measures <b>Measuring and reinforcing security culture improvements </b></p><p><b>MODULE 9: INCIDENT RESPONSE AND BUSINESS CONTINUITY INTEGRATION </b> Linking risk assessment with incident response planning <b>Identifying likely incidents and preparing playbooks </b> Roles and communication during an incident <b>Learning from incidents: root cause, lessons, and improvements </b> Ensuring continuity of critical services during cyber disruptions</p><p>MODULE 10: COMMUNICATING AND DEFENDING CYBER RISK DECISIONS <b>Tailoring messages for executives, boards, regulators, and technical teams </b> Using visuals, dashboards, and summaries to explain risk clearly <b>Reporting assumptions, limitations, and residual risk transparently </b> Handling scrutiny and difficult questions about security decisions <b>Turning cyber risk discussions into shared understanding and action</b></p><p><b>Please apply with CV and Photograph only if you are a freelance Trainer. If you do not have training experience PLEASE DO NOT APPLY</b></p><p>Job Types: Part-time, Permanent, Contract<br/>Contract length: 24 months</p><p>Pay: AED50.00 per hour</p><p>Expected hours: 40 per week</p>

Trainer on Cyber Security and Management Training

Gargash Group

<div>
 <p>
  Job Purpose:
 </p>
 <p>
  <br/>
 </p>
 <p>
  The Head of Cyber Security is responsible for developing, implementing, and overseeing a comprehensive cybersecurity strategy that protects the group&rsquo;s digital assets, infrastructure, systems, and data from internal and external threats. This job encompasses policy development, risk assessment, incident response, security operations, compliance, and awareness. The Head of Cyber Security serves as the group&rsquo;s cybersecurity authority, ensuring alignment between security programs and business objectives, while fostering a security-first culture across the group.
 </p>
 <p>
  <br/>
 </p>
 <p>
  Resposibilities:
 </p>
 <p>
  <br/>
 </p>
 <p>
  Strategic Leadership &amp; Governance
 </p>
 <p>
  &bull;Develop and lead the execution of the group-wide cyber security strategy in alignment with business goals and technology roadmap.
 </p>
 <p>
  &bull;Define cybersecurity policies, standards, and procedures based on industry best practices and regulatory requirements.
 </p>
 <p>
  &bull;Lead the group&rsquo;s Cyber Security Governance Committee and regularly report on security posture to executive leadership and board-level risk committees.
 </p>
 <p>
  &bull;Champion a proactive security culture by integrating cybersecurity into all business and technology decision-making processes.
 </p>
 <p>
  <br/>
 </p>
 <p>
  Cybersecurity Operations &amp; Risk Management
 </p>
 <p>
  &bull;Oversee the design, implementation, and management of security tools and controls including firewalls, SIEM, EDR, IAM, and DLP solutions.
 </p>
 <p>
  &bull;Direct the Security Operations Centre (SOC) and ensure continuous monitoring, threat intelligence, and rapid response to potential breaches.
 </p>
 <p>
  &bull;Conduct regular vulnerability assessments, penetration testing, and risk assessments to identify and mitigate potential threats.
 </p>
 <p>
  &bull;Lead cyber incident response planning, simulation exercises, and post-mortem reviews to improve organizational resilience.
 </p>
 <p>
  <br/>
 </p>
 <p>
  Compliance &amp; Audit
 </p>
 <p>
  &bull;Ensure compliance with relevant regulatory frameworks (e.g., ISO 27001, NIST, GDPR, PCI-DSS, local cybersecurity laws).
 </p>
 <p>
  &bull;Collaborate with internal and external auditors during cybersecurity audits and ensure timely remediation of any findings.
 </p>
 <p>
  &bull;Maintain up-to-date records of all cybersecurity-related incidents, controls, and risk assessments for audit and regulatory purposes.
 </p>
 <p>
  <br/>
 </p>
 <p>
  Data Privacy and Information Protection
 </p>
 <p>
  &bull;Work closely with the Data Protection Officer (DPO) and Legal team to ensure data protection measures are enforced.
 </p>
 <p>
  &bull;Oversee implementation of data classification, encryption, and secure data handling practices across the organization.
 </p>
 <p>
  &bull;Drive initiatives to reduce data leakage, insider threats, and loss of intellectual property.
 </p>
 <p>
  Security Architecture &amp; Infrastructure
 </p>
 <p>
  &bull;Guide the secure design of systems, networks, and applications from the ground up, incorporating security by design principles.
 </p>
 <p>
  &bull;Collaborate with IT infrastructure and application development teams to embed cybersecurity into solution architecture.
 </p>
 <p>
  &bull;Ensure cloud security governance is established and enforced across all SaaS, IaaS, and PaaS environments.
 </p>
 <p>
  <br/>
 </p>
 <p>
  Awareness, Training &amp; Culture
 </p>
 <p>
  &bull;Develop and lead group-wide security awareness campaigns and training programs for employees, contractors, and third parties.
 </p>
 <p>
  &bull;Create tailored training initiatives for high-risk user groups and leadership teams.
 </p>
 <p>
  &bull;Promote a culture of shared cybersecurity responsibility across all departments.
 </p>
 <p>
  Vendor &amp; Third-Party Security
 </p>
 <p>
  &bull;Assess the security posture of vendors, suppliers, and partners as part of the third-party risk management program.
 </p>
 <p>
  &bull;Establish security requirements and SLAs in vendor contracts and conduct periodic due diligence and reviews.
 </p>
 <p>
  <br/>
 </p>
 <p>
  Budget &amp; Team Leadership
 </p>
 <p>
  &bull;Lead, mentor, and manage the cybersecurity team, fostering a high-performance culture and continuous professional development.
 </p>
 <p>
  &bull;Define resource requirements, develop cybersecurity budgets, and oversee procurement of security technologies and services.
 </p>
 <p>
  &bull;Build capability maturity across cyber domains and succession plans for critical security roles.
 </p>
 <p>
  <br/>
 </p>
 <p>
  General
 </p>
 <p>
  &bull;Uphold company values throughout business practices and utilise sound judgment in decision making.
 </p>
 <p>
  &bull;Any other additional duties as may be required by management based on needs of the business.
 </p>
 <p>
  <br/>
 </p>
 <p>
  Requirements:
 </p>
 <p>
  <br/>
 </p>
 <p>
  &bull;A minimum of 10+ years of progressive experience in information security, with at least 5 years in a senior leadership role.
 </p>
 <p>
  &bull;Proven experience in managing enterprise security programs in large and complex organizations.
 </p>
 <p>
  &bull;Demonstrated expertise in threat management, incident response, risk assessment, security architecture, and compliance.
 </p>
 <p>
  &bull;Masters&rsquo;s degree in Computer Science, Information Technology, Cybersecurity, or a related field.
 </p>
 <p>
  <strong>
   &bull;Professional certifications such as CCISO, ISO 27001, ISO 42001, CISA, CISM, CISSP, AAIA, CEH, OSCP, or equivalent vendor-neutral credentials are required
  </strong>
  .
 </p>
 <p>
  &bull;Product/Technology related certification are preferred.
 </p>
</div>


Head of Cyber Security

DICETEK LLC

<div><p>We are looking for highly skilled cybersecurity consultants with extensive hands-on experience in SOC design, SIEM engineering, Incident Response, Threat Detection, and building cybersecurity maturity. Consultants should be proficient in building SOCs from scratch, developing SIEM use-cases, MITRE mapping, IR playbooks, and defining cybersecurity strategy.</p><p>
</p><p><b>Key Responsibilities:</b></p><p>
Lead technical cybersecurity discussions with IT, vendors, and stakeholders.</p><p>
Ensure alignment with regulatory requirements and security best practices.</p><p>
Enhance and maintain SIEM/SOC operations, including rule tuning, process development, and SOC setup (if needed).</p><p>
</p><p><b>Required Expertise:</b></p><p>
Strong hands-on experience in SIEM/SOC design and operations</p><p>
Cybersecurity governance and risk management</p><p>
Security architecture reviews</p><p>
Ability to engage effectively with IT/Security teams</p><p>
Experience in banking, finance, telco, or enterprise environments</p><p>
15&ndash;20 years of practical cybersecurity experience</p><p></p><p><b><br>
1 Cybersecurity Architecture Assessment &amp; Strategy</b></p><ul><li>
Lead a full end-to-end evaluation of the organization&rsquo;s existing SIEM architecture, SOC operations, and IR capabilities.</li><li>
Assess effectiveness across people, processes, and technology, identifying strengths, gaps, and opportunities for enhancement.</li><li>
Benchmark current cybersecurity maturity against industry standards (e.g., NIST CSF, ISO 27001, MITRE ATT&amp;CK).</li><li>
Develop a prioritized roadmap for SIEM/SOC/IR optimization and modernization.</li></ul><p><b>
2. SIEM Optimization &amp; Enhancement</b></p><ul><li>
Redesign SIEM architecture and data ingestion strategy to improve visibility, performance, and event fidelity.</li><li>
Enhance log parsing, normalization, enrichment, and ingestion from critical sources (cloud, endpoints, identity, OT/ICS, network, and security tools).</li><li>
Refine correlation logic, detection use cases, and alert tuning methodologies to reduce false positives and increase detection accuracy.</li><li>
Implement advanced detection techniques mapped to MITRE ATT&amp;CK, including custom rules, dashboards, and analytics.</li><li>
Establish SIEM governance processes, rule-tuning standards, and performance optimization practices.</li></ul><p><b>
3. SOC Maturity Improvement &amp; Operational Excellence</b></p><ul><li>
Conduct a deep review of SOC workflows, tiered responsibilities, shift coverage, and tooling integration.</li><li>
Redesign triage and escalation workflows to improve response efficiency and adherence to SLAs.</li><li>
Enhance tool interoperability (SIEM, SOAR, ticketing, TIP, EDR) to streamline end-to-end detection and response.</li><li>
Develop or refine IR playbooks for priority incident types (phishing, malware, insider threat, cloud compromise, etc.).</li><li>
Lead SOC modernization initiatives including automation, orchestration, and analyst enablement.</li></ul><p><b>
4. Incident Response Uplift</b></p><ul><li>
Evaluate and enhance incident response strategies, containment approaches, escalation paths, and communication flows.</li><li>
Conduct tabletop exercises, technical simulations, and scenario-based training to improve analyst readiness.</li><li>
Improve coordination across IT, security, compliance, and risk teams during incident handling.</li><li>
Advise leadership on best practices, emerging threats, and enterprise IR preparedness.</li></ul><p><b>
5. Implementation Leadership &amp; Delivery</b></p><ul><li>
Drive the successful implementation of all improvements identified during the assessment phase.</li><li>
Manage cross-functional workstreams, ensuring timely delivery of SIEM/SOC enhancements.</li><li>
Ensure all changes align with cybersecurity best practices, compliance requirements, and business objectives.</li><li>
Track progress using KPIs such as MTTD, MTTR, correlation accuracy, false-positive rates, and detection coverage.</li></ul></div><p></p>

Cybersecurity consultant

Crown Prince Palace

<p>The Cyber Security Engineer is responsible to protect the private estate&rsquo;s digital infrastructure&mdash;including smart systems, cloud platforms, surveillance networks, and personal data&mdash;from cybersecurity threats, breaches, and vulnerabilities. The Cyber Security Engineer ensures the confidentiality, integrity, and availability of critical systems and information used in estate operations, family offices, IoT-based building management systems (BMS), and luxury lifestyle technologies.</p><p><b>JOB LOCATION: FUJAIRAH, UAE</b></p><p><b>QUALIFICATIONS: </b></p><ul><li>Bachelor&rsquo;s Degree in Cybersecurity, Computer Science, Information Security, or related IT field.</li><li>Professional certifications highly preferred:</li><li>CISSP (Certified Information Systems Security Professional)</li><li>CEH (Certified Ethical Hacker)</li><li>CompTIA Security+</li><li>CISM, CISA, or Cisco CyberOps</li><li>Familiarity with UAE cyber laws, data privacy regulations, and NESA or DESC frameworks is an advantage.</li><li>Certification in cloud security (e.g., Microsoft SC-200, AWS Security Specialty) is a plus.</li></ul><p><b>EXPERIENCE:</b></p><ul><li>4-6 years of hands-on experience in cybersecurity engineering, network protection, or IT risk management.</li><li>Strong working knowledge of Microsoft defender EDR, Sentinel and Purview</li><li>Experience securing hybrid infrastructures, including on-premises estate systems, smart IoT devices, and cloud platforms (e.g., AWS, Azure, GCP).</li><li>Proven experience in penetration testing, incident response, firewall configuration, and vulnerability management.</li><li>Background in residential estates, VVIP environments, or luxury hospitality IT security is highly desirable.</li></ul><p><b>KEY SKILLS/KNOWLEDGE:</b></p><p><b>Network &amp; Endpoint Security</b></p><ul><li>Implementing and managing firewalls, VPNs, intrusion detection/prevention systems (IDS/IPS).</li><li>Monitoring internal networks and Wi-Fi systems for unauthorized access or suspicious behavior.</li><li>Securing endpoints include servers, desktops, laptops, mobile devices, CCTV NVRs, and smart controls,</li></ul><p><b>Threat Monitoring &amp; Response</b></p><ul><li>Using SIEM tools (e.g., Splunk, Microsoft Sentinel, QRadar) in combination with EDR/XDR platforms such as Microsoft Defender for Endpoint, CrowdStrike Falcon, Sentinel One, and other EDR tools to detect, investigate, and respond to threats in real time. Conducting cyber risk assessments, vulnerability scans, and penetration tests.</li><li>Responding to incidents and coordinating with IT and estate leadership during cyber emergencies.</li></ul><p><b>Data Protection &amp; Compliance</b></p><ul><li>Enforcing data encryption, access control, and multi-factor authentication (MFA) policies.</li><li>Managing secure backups, disaster recovery strategies, and ransomware defenses.</li><li>Ensuring compliance with local and international data protection laws, especially regarding family or VVIP data.</li></ul><p><b>Cloud &amp; Smart System Security</b></p><ul><li>Securing IoT systems, smart BMS, surveillance, access control, and automated estate systems.</li><li>Protecting cloud-based applications, virtual networks, and cloud storage environments from attacks or misconfigurations.</li></ul><p><b>Security Audits &amp; Documentation</b></p><ul><li>Conducting security audits, preparing reports, and maintaining audit trails for compliance and improvement.</li><li>Keeping documentation of policies, procedures, and user access logs up to date.</li><li>Supporting regular security training for estate staff, drivers, IT users, and maintenance personnel.</li></ul><p><b>Confidentiality &amp; Discretion</b></p><ul><li>Demonstrating a high level of confidentiality, especially when handling data related to family members, estate assets, or guest profiles.</li><li>Trustworthy, discreet, and reliable in high-sensitivity environments.</li></ul><p><b>BENEFITS:</b></p><ul><li>Shared accommodation provided by company</li><li>Health Insurance</li><li>Meals whilst at work</li><li>1 economy flight per annum</li><li>30 days' vacation per annum</li><li>Salary up to 8,000 AED</li></ul><p>Job Type: Full-time</p><p>Application Question(s):</p><ul><li>Are you able to relocate and/or reliably commute to Fujairah?</li><li>Do you have UAE driver's license?</li><li>Can you join immediately?</li></ul>

Cyber Security Engineer

Wipro

<div>Job Description<p></p><div><div><ul><li><div><b><br>
</b><br>
</div></li></ul></div></div><div><div><div><div>Job Title: Cyber Security Analyst - L4
</div></div></div></div><div><div><div><div>City: Dubai
</div></div></div></div><div><div><div><div>State/Province: Dubai
</div></div></div></div><div><div><div><div>Posting Start Date: 12/5/25
</div></div></div></div><div><div><div><div>Job Description:
<div><div><div><h2 class="jobSectionHeader"><b>Job Description
</b></h2></div><div><p><b>Role Purpose<br>
</b></p><p><br>
The purpose of this role is to analyse, identify, rectify &amp; recommend specific improvement measures that help in the security posture of the organization by protecting the sensitive information<br>
<br>
</p></div></div><div><div><h2 class="jobSectionHeader"><b>&#847;
</b></h2></div><div><h1 class="jobSectionHeader"><b>Do
</b></h1><ul><li><h2 class="jobSectionHeader"><b>Ensuring customer centricity by providing apt cybersecurity
</b></h2></li><li>Monitoring and safeguarding the log sources and security access
</li><li>Planning for disaster recovery in the event of any security breaches
</li><li>Monitor for attacks, intrusions and unusual, unauthorized or illegal activity
</li><li>Performs moderately complex log reviews and forensic analysis to identify unauthorized or unacceptable access to data or systems
</li><li>Conduct security assessments, risk analysis and root cause analysis of security incidents
</li><li>Handling incidents escalated by the L1 team in 24x7 rotational shifts
</li><li>Use advanced analytics tools to determine emerging threat patterns and vulnerabilities
</li><li>Completing all tactical security operations tasks associated with this engagement.
</li><li>Analyses all the attacks and come up with remedial attack analysis
</li><li>Conduct detailed analysis of incidents and create reports and dashboards
</li><li><h2 class="jobSectionHeader"><b>Stakeholder coordination &amp; audit assistance
</b></h2></li><li>Liaise with stakeholders in relation to cyber security issues and provide future recommendations
</li><li>Maintain an information security risk register and assist with internal and external audits relating to information security
</li><li>Assist with the creation, maintenance and delivery of cyber security awareness training for colleagues
</li><li>Advice and guidance to employees on issues such as spam and unwanted or malicious emails
</li></ul></div></div><div><div><h2 class="jobSectionHeader"><b>&#847;
</b></h2></div><div><h1 class="jobSectionHeader"><b>Deliver
</b></h1><div><div><div><div><p><b>No.<br>
</b></p></div><div><p><b>Performance Parameter<br>
</b></p></div><div><p><b>Measure<br>
</b></p></div></div><br>
<div><div><p>1.<br>
</p></div><div><p>Customer centricity<br>
 </p></div><div><p>Timely security breach solutioning to end users, Internal stakeholders &amp; external customers experience<br>
</p></div></div><br>
<div><div><p>2.<br>
</p></div><div><p>Process Adherence<br>
</p></div><div><p>Adherence to SLA&acirc;&#128;&#153;s (90-95%), response time and resolution time TAT
</p></div></div><br>
</div></div></div></div><div><div><h2 class="jobSectionHeader"><b>&#847;
</b></h2></div></div><div></div><div><div><h2 class="jobSectionHeader"><b>&#847;</b></h2></div></div></div></div></div></div></div></div><p></p>

Cyber Security Analyst - L4

Mackenzie Jones Middle East

<div>
 <p>
  We&rsquo;re hiring an
  <strong>
   Technology Risk Analyst
  </strong>
  in Dubai to support our Head of IT and CISO organization in delivering security risk assurance, compliance readiness, and governance across EMEA. In this role, you&rsquo;ll assist with risk and issue management, maintain and enhance cyber security frameworks, track audit and regulatory actions, and prepare reports and dashboards for senior stakeholders. The ideal candidate has experience with
  <strong>
   Cyber Security frameworks (NIST, ISO 27001, COBIT, ITIL)
  </strong>
  ,
  <strong>
   DIFC/QFCRA regulations
  </strong>
  , strong stakeholder management skills, and expertise in policy design, business analysis, and Microsoft Suite.
 </p>
</div>


Technology Risk Analyst

Explore 1524+ Cyber security consultant in Dubai this December. Find roles across top companies and apply now to boost your career.