cyber security engineer

SAVE IN GOLD

Cyber Security EngineerLocation: UAE / RemoteWe&rsquo;re looking for a skilled and passionate Cyber Security Engineer to join our team and enhance the security of our investment platform across mobile and web. If you&rsquo;re driven by protecting digital systems, identifying vulnerabilities, and ensuring secure deployments &mdash; we&rsquo;d love to have you on board.Key Responsibilities<ul><li>Conduct comprehensive security assessments, penetration tests, and vulnerability analyses.</li><li>Secure and maintain our cloud infrastructure and CI/CD pipelines.</li><li>Identify, analyze, and mitigate security risks in web and mobile applications.</li><li>Implement and manage DevSecOps practices (note: we currently do not have a dedicated DevOps engineer).</li><li>Handle incident response and ensure compliance with OWASP, ISO, and GDPR standards.</li></ul>Requirements<ul><li>Strong understanding of web, mobile, and API security principles.</li><li>Experience securing cloud environments such as AWS, GCP, or Azure.</li><li>Hands-on experience with tools like Burp Suite, OWASP ZAP, Metasploit, and SonarQube.</li><li>Familiarity with container and pipeline security (e.g., Docker, GitHub Actions, Jenkins).</li><li>Proven ability to collaborate closely with developers to build secure and scalable systems.</li><li>Experience with DevOps and CI/CD pipelines is a strong plus.</li></ul>If you&rsquo;re ready to make an impact by securing a growing fintech platform and enjoy working in a fast-paced, collaborative environment &mdash; apply now!Job Type: Full-timePay: AED3,000.00 - AED5,000.00 per month

Cyber Security Engineer

Job Title: Cyber Security Engineer (Mobile &amp; Web Trading Apps)Location: Dubai, UAEEmployment Type: Full-time / On-siteExperience: 3&ndash;6 yearsWe are looking for a Cyber Security Engineer to help secure our mobile and web trading applications.The ideal candidate will have deep knowledge of ethical hacking, fintech app security, and experience testing real-world trading and payment flows.Key ResponsibilitiesPerform security testing (VAPT) for mobile and web trading applicationsIdentify and fix vulnerabilities such as data leaks, weak authentication, and insecure APIsConduct manual and automated penetration testing including business logic and workflow attacksTest trading-specific flows for issues like order manipulation, replay attacks, race conditions, and incorrect settlementsTest API endpoints for unauthorized access, missing rate limits, and parameter tamperingTest mobile apps for jailbreak/root bypass, insecure data storage, and certificate pinning bypassReview code and configurations for encryption, authentication, and transaction logic risksValidate transaction integrity and secure wallet operationsPrepare clear, detailed security reports with risk levels and actionable recommendationsCollaborate with developers, QA, and backend teams to ensure secure fixesEnsure compliance with secure coding practices, OWASP, ISO 27001, and fintech data protection standardsTest for fraud and abuse scenarios including bot automation, fake orders, and session hijackingValidate key management, encryption (in transit &amp; at rest), and use of HSM or cloud key vaultsVerify logging and alerting for suspicious transactions and security incidentsStay updated on latest hacking tools, mobile/web attack trends, and financial app threatsRequired SkillsStrong understanding of mobile (Android/iOS) and web app securityHands-on with Burp Suite, ZAP, Postman, Nmap, MobSF, Frida, or similar toolsGood understanding of OWASP Top 10, API security, SAST/DAST, and vulnerability analysisExperience testing trading, wallet, and payment flowsKnowledge of attacks like replay, race condition, spoofing, and injectionFamiliar with cryptography and key management (HSM/KMS)Experience with anti-bot, rate-limiting, and session management controlsStrong report writing and communication skillsTeam player who collaborates well with developers and testersExperience in fintech or banking is highly preferredQualificationsBachelor&rsquo;s or Master&rsquo;s in Computer Science, IT, or CybersecurityCertifications: CEH, OSCP, ISO 27001, or equivalent preferred3+ years of experience in penetration testing and application securityBased in UAEJob Type: Full-timePay: AED5,000.00 - AED7,000.00 per month

Client of Involved Solutions

You will be responsible for protecting the organisation's infrastructure and data from evolving cyber threats. The role will cover threat detection, incident response, and implementation of security controls across cloud and on-premise environments. You will also work closely with IT operations and compliance to ensure alignment with best practices and regulatory requirements.
Skills:
<ul>
 <li>Strong hands-on experience with firewalls, IDS/IPS, and endpoint protection platforms (e.g., Palo Alto, Fortinet, CrowdStrike)</li>
 <li>Skilled in managing and tuning SIEM solutions (Splunk, Microsoft Sentinel, or similar)</li>
 <li>Expertise in threat detection, vulnerability management, and incident response</li>
 <li>Experience implementing cloud security controls across Azure and/or AWS</li>
 <li>Proficiency with security hardening, identity and access management (IAM), and zero-trust architectures</li>
 <li>Knowledge of encryption standards, PKI, and network protocols</li>
 <li>Familiarity with compliance frameworks such as ISO 27001, NIST, or PCI DSS</li>
</ul>

AL GHAITH TECHNICAL SERVICES

Penetration Tester / Vulnerability Analyst &ndash; LLM Security FocusRole Overview:We&rsquo;re looking for a skilled Pen Tester &amp; VA Specialist with experience in AI / LLM system testing. You&rsquo;ll perform security assessments across web, API, cloud, and AI environments &mdash; focusing on prompt injection, guardrail bypass, model extraction, and Zero-Trust validation for enterprise and government clients.Key Responsibilities:Conduct web, API, and infrastructure vulnerability assessments &amp; penetration tests.Test LLM applications for prompt injection, data leakage, and model theft.Use tools like Burp Suite, Trivy, PromptFoo, Garak, NeMo Guardrails, Presidio.Produce technical reports and recommend mitigations aligned with ISO 27001 / PDPL.Collaborate with DevOps and SOC teams for continuous assurance.Qualifications:3&ndash;5 yrs in PenTesting / VA or AI Security.Strong knowledge of OWASP LLM Top 10, CVSS, MITRE ATT&amp;CK.Preferred: OSCP / CEH / AI Security certifications.Scripting in Python / Bash is a plus.Job Type: Full-time

Cyber security engineer

ATHGADLANG

Job SummaryThe Cybersecurity Engineer will play a key role in designing, implementing, and maintaining secure IT and OT environments across the organization. This role involves hands-on technical work in security architecture, vulnerability management, incident response, and compliance alignment. The engineer will collaborate with cross-functional teams to embed security best practices into infrastructure, applications, and cloud environments, ensuring compliance with ISO 27001, UAEIA, and NIST standards.Key Responsibilities1. Security Architecture &amp; Engineering<ul><li>Design and implement secure architectures across IT and OT systems following defense-in-depth and secure-by-design principles.</li><li>Develop and maintain security controls for infrastructure, endpoints, cloud, and applications.</li><li>Validate the security of network, system, and cloud configurations against architecture standards and compliance requirements.</li></ul>2. Vulnerability &amp; Risk Management<ul><li>Conduct regular vulnerability assessments and threat modeling for enterprise assets.</li><li>Analyze and prioritize risks, coordinating remediation with infrastructure and application teams.</li><li>Ensure risk mitigation aligns with ISO 27001, UAEIA, and NIST frameworks.</li></ul>3. Security Operations &amp; Monitoring<ul><li>Review alerts, logs, and indicators of compromise to support continuous monitoring and incident detection.</li><li>Recommend and implement automation or tuning improvements to enhance detection accuracy and reduce false positives.</li></ul>4. Cloud &amp; Application Security<ul><li>Engineer secure architectures and configurations for multi-cloud environments (AWS, Azure, GCP).</li><li>Integrate security controls within CI/CD pipelines and DevSecOps workflows.</li><li>Participate in secure code reviews and support application security testing (SAST, DAST).</li></ul>5. Incident Response &amp; Forensics<ul><li>Lead technical response during cyber incidents, conducting root cause analysis and digital forensics.</li><li>Update and maintain incident response playbooks; lead post-incident reviews.</li><li>Ensure evidence handling and documentation comply with legal and regulatory standards.</li></ul>6. Compliance &amp; Policy Alignment<ul><li>Ensure cybersecurity policies, standards, and procedures meet UAEIA, ISO 27001/27002, and internal audit requirements.</li><li>Support audit readiness by maintaining accurate documentation, technical standards, and access control records.</li><li>Provide technical input during internal reviews and regulatory assessments.</li></ul>7. Stakeholder Collaboration<ul><li>Collaborate with SOC, IT infrastructure, application, risk, and audit teams to embed security into projects and operations.</li><li>Review network and system architectures from a security standpoint, providing risk-based recommendations.</li><li>Participate in change management processes to evaluate security impacts.</li></ul>Technical Expertise<ul><li>Strong knowledge of network security technologies (firewalls, WAFs, IDS/IPS) and configuration best practices.</li><li>Experience with SIEM (e.g., Splunk, QRadar), SOAR, EDR/XDR, vulnerability management (Tenable, Qualys), and PAM (CyberArk, BeyondTrust).</li><li>Skilled in securing hybrid and cloud-native environments.</li><li>Familiar with secure development, DevSecOps, and container security (Docker, Kubernetes).</li><li>Proficient in scripting languages such as Python, PowerShell, or Bash for automation and analysis.</li></ul>Required Skills and Qualifications<ul><li>5&ndash;8 years of experience in cybersecurity engineering, security architecture, or technical risk management.</li><li>Strong understanding of network, endpoint, cloud, and application security principles.</li><li>Experience in vulnerability management, threat modeling, and incident response.</li><li>Working knowledge of ISO 27001, UAEIA, NIST CSF, and MITRE ATT&amp;CK frameworks.</li><li>Excellent communication skills with the ability to explain complex security concepts to non-technical stakeholders.</li><li>Relevant certifications such as CISSP, OSCP, CEH, GCIA, CCSP, or equivalent preferred.</li></ul>Key DeliverablesSecurity Architecture &amp; Engineering<ul><li>Secure architecture diagrams, design documentation, and technical standards.</li><li>Assessment reports on system and infrastructure configurations with mitigation recommendations.</li></ul>Vulnerability &amp; Risk Management<ul><li>Regular vulnerability analysis reports, remediation tracking, and risk assessments.</li><li>Threat models aligned with business and regulatory priorities.</li></ul>Security Operations &amp; Monitoring<ul><li>SIEM/SOAR detection use cases and correlation rules.</li><li>Dashboards and metrics demonstrating incident detection and response improvements.</li></ul>Cloud &amp; Application Security<ul><li>CI/CD security validation checklists and application testing reports.</li><li>Cloud security posture assessments and hardening reports.</li></ul>Incident Response &amp; Forensics<ul><li>Investigation logs, post-incident reports, and updated IR playbooks.</li><li>Documented forensic analysis and evidence handling reports.</li></ul>Documentation &amp; Compliance<ul><li>Technical SOPs and configuration baselines aligned with ISO 27001 and UAEIA.</li><li>Audit-ready documentation for network changes, access control, and policy exceptions.</li></ul>Cybersecurity &amp; Network Knowledge Sharing<ul><li>Quarterly security landscape reports highlighting trends, risks, and recommendations.</li><li>Knowledge-sharing sessions and training materials for internal teams.</li></ul>Reporting &amp; GovernanceThe Cybersecurity Engineer will report to the Head of Cybersecurity (or equivalent) and will contribute to the organization&rsquo;s overall security posture, ensuring compliance, operational resilience, and continuous improvement.Job Types: Full-time, Contract

Cyber Security Engineer- 6 Months

Peraton

<div>About Peraton 
Peraton is a next-generation national security company that drives missions of consequence spanning the globe and extending to the farthest reaches of the galaxy. As the world's leading mission capability integrator and transformative enterprise IT provider, we deliver trusted, highly differentiated solutions and technologies to protect our nation and allies. Peraton operates at the critical nexus between traditional and nontraditional threats across all domains: land, sea, space, air, and cyberspace. The company serves as a valued partner to essential government agencies and supports every branch of the U.S. armed forces. Each day, our employees do the can't be done by solving the most daunting challenges facing our customers. Visit peraton.com to learn how we're keeping people around the world safe and secure. 
 
Program Overview 
 
About The Role 
 
Secure Division Support. The GCC provides CSSP responsibilities and conducts DODIN Operations and DCO - Internal Defensive Measures (IDM) to protect the DODIN IAW the DoDM 8530.01 and the DoD Cybersecurity Services Evaluator Scoring Metrics (ESM). These responsibilities are broken into five (5) CSSP functions; Identify, Protect, Detect, Respond, and Recover. GCC is responsible to conduct these functions for its assigned portion of the DODIN for both unclassified and classified networks/ systems. The division provides support services for the protection, monitoring, analysis, detection, and response to unauthorized activity within the DoD Information Systems and Networks. DCO-IDM services are required to defend against unauthorized activity on all Army assets residing on the NIPRNet and SIPRNet. The division provides defensive measures to protect and defend information, computers, and networks from disruption, denial, degradation, or destruction. The division provides sensor management and event analysis and response for network and host-based events. For sensor management, the division provides management of in-line Network Intrusion Protection System/Network Intrusion Detection System (NIPS/NIDS) sensors monitoring all CONUS DoDIN-A NIPRNet and SIPRNet Enterprise traffic to detect sensor outages and activities that attempt to compromise the confidentiality, integrity, or availability of the network. In coordination with GCC Operations, DCO initiates defensive security procedures upon detection of these attacks. Event analysis and response includes the processes involved with reducing multiple cyber incidents to actual malicious threat determinations and mitigating those threats IAW guidance received from GCC Government leadership. Support the Government in providing services for CSSP services on both the NIPRNet and SIPRNet IAW Appendix E: Secure Division Workload Assessment in support of the CONUS portion of the DoDIN-A. Develop reports and products, both current and long-term, in support of CSSP and course of action development. Prepare Tactics, Techniques, and Procedures (TTP), SOPs, Executive Summary (EXSUMS), trip reports, and information/point papers. Contribute during the preparation of agreements, policy, and guidance documentation such as Memorandums of Understanding / Agreement (MOU/A), Service Level Agreements (SLA). 
<ul><li>Defensive Cyber Infrastructure (DCI) Support. Perform the following DCI functions:</li><li>Develop and distribute content provided by security platform vendors at least weekly and as needed.</li><li>Develop and distribute in-house content based on tippers from higher organizations and the Threat Hunt team.</li><li>Provide content development and distribution to tactical edge customers and develop TTPs for doing so.</li><li>Consolidate different data sources into a single view used to assess the status of a specific threat on the network.</li><li>Develop and/or maintain dashboards displaying specific CSSP items of interest (i.e. top 10 attackers, top 10 destinations, top attack vector, etc.) and all active cyber incidents, in near real time, within each respective AOR.</li><li>Maintain, update, test, and implement signatures and policies for each sensor managed by GCC.</li><li>Changes must be approved through the established ITIL process.</li><li>Develop signatures and policies that include both network- and host-based sensors.</li><li>Update as necessary to minimize false positives and validate for proper syntax.</li><li>Conduct all development and testing on isolated networks.</li><li>Document and conduct testing activity with plan procedures, results, and operational procedures as signatures are developed and/or updated.</li><li>Update and validate plan at least annually. A signature test plan shall be developed.</li></ul> 

Qualifications 
 
Basic Qualifications: 
 
<ul><li>8 years with BS/BA; 6 years with MS/MA; 3 years with PhD</li><li>An additional 4 years of experience can be used in lieu of a degree</li><li>Certifications: GMON or GRID or CEH or Cloud+ or CySA+ or GSEC or PenTest+ or Security+ or SSCP</li><li>Active TS/SCI Clearance
</li><li>Ability to conduct vulnerability assessments and monitor networks to support test and operational environment requirements.</li><li>Solid understanding of data transport, encryption, networking, IT systems, and cybersecurity fundamentals.</li></ul> 

SCA / Union / Intern Rate or Range 
 
Details 
 
Target Salary Range: $66,000 - $106,000. This represents the typical salary range for this position. Salary is determined by various factors, including but not limited to, the scope and responsibilities of the position, the individual's experience, education, knowledge, skills, and competencies, as well as geographic location and business and contract considerations. Depending on the position, employees may be eligible for overtime, shift differential, and a discretionary bonus in addition to base pay.
 
 
EEO: Equal opportunity employer, including disability and protected veterans, or other characteristics protected by law.</div>

Cyber Security Engineer Senior

BCS - Business Continuity SolutionsAbout Us: Business Continuity Solutions (BCS) is a leading provider of technology-enabled business continuity and IT solutions across the Middle East. Established in 2009, BCS specializes in Data Center Optimization, Business Continuity, Unified Communications, Cybersecurity, Vulnerability Assessment, and Cloud Solutions. We collaborate with global blue-chip partners, leveraging domain expertise and strategic alliances to deliver cutting-edge technology solutions.Role: Cybersecurity Engineer (SOC)Location: Mangalore, India (Remote Role) Employment Type: Full-time Level: Entry-Level &ndash; Monitoring &amp; Incident Response Customer Base: Supporting clients across the GCC region.Key Responsibilities:<ul><li>Monitor security alerts and notifications from tools such as SIEM (Wazuh, Crowdstrike, Netskope ), IDS/IPS, EDR, firewall logs, network traffic.</li><li>Triage incoming security events, categorise by severity, determine false positives vs real threats, and escalate appropriately.</li><li>Support vulnerability scanning and assist with remediation tracking and escalate to next level team.</li><li>Maintain documentation: security playbooks, incident reports, detection thresholds, monitoring dashboards.</li><li>Collaborate with IT, network, infrastructure and application teams to ensure security monitoring is integrated and effective.</li><li>Stay updated with latest threats, vulnerabilities, security technologies and industry best practices.</li><li>Participate in scheduled security reviews, audits and assist in compliance checks as needed.</li><li>Support the improvement of monitoring and detection capabilities: tune alerts, reduce noise, enhance coverage.</li><li>Work shift involves Night shifts and weekends depending on SOC staffing model.</li></ul>Required Qualifications &amp; Skills:<ul><li>Bachelor&rsquo;s degree in Computer Science, Information Technology, Cybersecurity or equivalent.</li><li>Basic understanding of networking fundamentals (TCP/IP, routing, switching, firewalls).</li><li>Familiarity with operating systems (Windows, Linux) and common logs/events.</li><li>Interest in cybersecurity, strong analytical mindset, attention to detail.</li><li>Good verbal and written communication skills (to document incidents, interact with teams).</li><li>Ability to work in a team, be proactive and willing to learn.</li><li>Willingness to work in shifts / non-standard hours if monitoring is around the clock.</li></ul>Working Conditions:<ul><li>Requires shift work including nights/weekends as a part of 24&times;7 SOC operations.</li><li>May involve being on-call for security incidents or major events.</li><li>Fast-paced environment with need to respond rapidly to alerts and security events.</li></ul>Job Type: Full-timeBase Pay: From &#8377;15,000.00 per monthBenefits:<ul><li>Work from home</li></ul>Work Location: In personExpected Start Date: 05/11/2025

Cyber Security Engineer (SOC)

Search 10000+ Cyber security engineer jobs near you this November. New roles added regularly across leading industries. Apply today.

10000 cyber security engineer jobs NEAR_ME

Cyber Security Engineer

Cyber Security Engineer

Cyber Security Engineer

Cyber security engineer

Cyber Security Engineer- 6 Months

Cyber Security Engineer Senior

Cyber Security Engineer (SOC)