cybersecurity engineer

Advansys ME

Job Overview: 
We are seeking a highly skilled OT Cybersecurity Engineer to support our growing portfolio of industrial cybersecurity projects. The ideal candidate will have strong hands-on experience in conducting OT cybersecurity risk assessments, developing disaster recovery plans, and implementing security controls in operational technology environments including energy, oil & gas, and utilities.
 
This role will be part of a project delivery team responsible for assessment, design, implementation, testing, and commissioning of OT-CS controls in line with global standards (ISA/IEC 62443, NIST SP 800-82, etc.).
 
Key Responsibilities: 
1. Assessment & Design
 
<ul>
<li>Conduct site-based OT cybersecurity risk assessments and gap analysis</li>
<li>Perform asset inventory mapping, network zoning, and data flow analysis</li>
<li>Identify vulnerabilities in OT environments (PLC/SCADA/DCS/RTU systems)</li>
<li>Develop risk treatment plans, cybersecurity roadmaps, and disaster recovery plans</li>
<li>Create network architecture diagrams and zoning segmentation designs</li>
</ul>
2. Implementation & Configuration
 
<ul>
<li>Configure and deploy OT firewalls, switches, and segmentation appliances (e.g., Fortinet, Juniper, Hirschmann, Cisco, Moxa)</li>
<li>Implement endpoint protection, application whitelisting, patching, and USB control solutions</li>
<li>Integrate and tune SIEM, IDS/IPS, and secure remote access platforms</li>
<li>Perform system backups, hardening, patch management, and monitoring setup</li>
<li>Coordinate with SOC/NOC teams to ensure proper monitoring, incident detection, and alert correlation for OT environments</li>
<li>Assist in integrating OT assets into existing SOC workflows and playbooks</li>
<li>Support commissioning, Factory Acceptance Testing (FAT), Site Acceptance Testing (SAT), and go-live activities</li>
</ul>
3. Compliance & Documentation
 
<ul>
<li>Align assessments and implementations with global and regional standards: ISA/IEC 62443, NIST SP 800-82, ISO 27001, NCA ECC, and NESA</li>
<li>Develop comprehensive documentation: High-Level Designs (HLDs), Low-Level Designs (LLDs), FAT/SAT reports, Disaster Recovery and Business Continuity Plans, backup and restoration procedures</li>
<li>Deliver hands-on training sessions for customer teams on implemented controls</li>
<li>Support post-deployment SLA services, incident response, and system health checks</li>
</ul>
Requirements
 
<ul>
<li>Bachelor’s Degree in Engineering, Computer Science, or related field</li>
<li>Minimum 5 years of OT cybersecurity experience in industrial environments</li>
<li>Strong knowledge of ICS/SCADA/DCS platforms (e.g., Honeywell, Siemens, Schneider, Emerson)</li>
<li>Hands-on experience with industrial firewalls, SIEM, EDR, backup systems</li>
<li>Familiarity with OT protocols (Modbus, OPC, DNP3, IEC 61850, etc.)</li>
<li>Understanding of standards: ISA/IEC 62443, NIST SP 800-82, ISO 27001 (with OT alignment)</li>
<li>Experience with cloud security technologies (e.g., AWS, Azure) is considered a strong plus, especially in environments involving IT/OT integration or industrial digitalization.</li>
<li>Ability to work independently on customer sites and lead technical delivery activities</li>
</ul>
Preferred Certifications (any of the following): 
<ul>
<li>GICSP, ISA/IEC 62443, CISSP, CRISC, CISM</li>
<li>CCNP Security, Fortinet NSE, CySA+, CEH, or equivalent</li>
</ul>

OT Cybersecurity Engineer

Nano Health Suite

Job Title: Cyber Security Specialist (Junior 3-5 years) Med Senior (5-8 years) Senior (More than 8 years)Location: (on site)Job Type: [Full-Time]Department: IT DepartmentJob Summary:We are seeking a skilled Cybersecurity Analyst with strong experience in threat detection, security monitoring, and compliance enforcement across hybrid IT environments. The ideal candidate will be responsible for analyzing security events, conducting risk assessments, ensuring regulatory compliance (e.g., ISO 27001, NIST, GDPR), and supporting incident response operations. This role plays a critical part in protecting organizational assets, infrastructure, and sensitive data.Key Responsibilities:Security Monitoring &amp; Incident Response<ul><li>Monitor and triage alerts from SIEM platforms (e.g., Wazuh, Splunk, Azure Sentinel, ELK)</li><li>Analyze logs, events, and threats across endpoints, networks, and cloud systems</li><li>Participate in incident response, root cause analysis, and recovery</li><li>Investigate phishing, malware, and suspicious behavior incidents</li><li>Collaborate with IT teams to enforce security controls and reduce attack surfaces</li></ul>Governance, Risk &amp; Compliance<ul><li>Maintain and enforce security policies, procedures, and documentation</li><li>Assist in internal audits, control testing, and compliance assessments (ISO 27001, NIST, HIPAA, GDPR)</li><li>Maintain and update the organization&rsquo;s risk register</li><li>Support user training and organization-wide security awareness</li><li>Contribute to disaster recovery and business continuity planning from a security perspective</li></ul>Vulnerability &amp; Threat Management<ul><li>Perform and analyze vulnerability scans using tools such as Nessus, Qualys, or similar platforms (hands-on experience required, even if not currently in use)</li><li>Contribute to the development or implementation of vulnerability detection solutions</li><li>Track remediation of security gaps and report on posture trends</li><li>Maintain awareness of threat intelligence feeds, zero-day exploits, and CVEs</li><li>Document Indicators of Compromise (IOCs) and support internal threat intelligence initiatives</li></ul>Tooling &amp; Automation<ul><li>Tune SIEM/SOAR rules and dashboards for improved detection accuracy</li><li>Contribute to automation workflows (e.g., alert enrichment, threat classification)</li><li>Integrate compliance/security checks into CI/CD pipelines or infrastructure as code (if applicable)</li></ul>Required Skills &amp; Qualifications:<ul><li>Bachelor's degree in computer science, Information Security, or a related field</li><li>3&ndash;8+ years of experience in cybersecurity operations, compliance, or SOC (depending on level)</li><li>Strong hands-on experience with SIEM tools (e.g., Wazuh, Splunk, Sentinel, QRadar, ELK)</li><li>Deep familiarity with compliance standards (ISO 27001, NIST, CIS, GDPR, HIPAA)</li><li>Prior use or development experience with vulnerability management tools (e.g., Nessus, Qualys, OpenVAS, etc.)</li><li>Understanding of Windows, Linux, and Cloud environments (Azure AD preferred)</li><li>Excellent analytical, documentation, and communication skills</li></ul>Preferred Certifications:<ul><li>CompTIA Security+, CySA+</li><li>ISO 27001 Lead Implementer / Auditor</li><li>SC-200: Microsoft Security Operations Analyst</li><li>CISA, CISM, or equivalent GRC-related credentials</li></ul>Job Type: Full-timePay: E&pound;20,000.00 - E&pound;60,000.00 per monthApplication Question(s):<ul><li>Do you Have Experience with ISO 27001, NIST, CIS, HIPAA, GDPR, UAE/NESA standards (if applicable)</li><li>Have you authored or revised security policies in your past role? Give an example.&rdquo;</li><li>Walk me through a compliance audit you participated in. What findings did you help resolve?&rdquo;</li><li>&ldquo;What&rsquo;s your process for investigating high-severity alerts?&rdquo;</li><li>How do you correlate IoCs with endpoint or network logs?&rdquo;</li><li>&ldquo;Describe a security incident you handled and how you documented it.&rdquo;</li><li>&ldquo;How do you perform and prioritize vulnerability remediation?&rdquo;</li><li>Do you have a notice period or can you join us immediately ?</li><li>what is your current salary ?and expected salary?</li></ul>Expected Start Date: 28/11/2025

Cybersecurity Engineer

Agile Managex Technologies LLC

Company Overview: Agile ManageX Technologies (Agile MTech) is a Dubai-based IT services company specializing in managed infrastructure, cybersecurity, and digital transformation. With over a decade of experience and a customer-first approach, we help businesses secure, streamline, and scale their operations through tailored technology solutions.Job Overview:We are seeking a highly skilled and motivated Pre-Sales Engineer &ndash; Cybersecurity with a strong background in IT infrastructure and security technologies. The ideal candidate should have a solid understanding of cybersecurity tools, governance frameworks, and IT infrastructure, with the ability to design, propose, and support solutions that address client requirements. This role involves close collaboration with sales, technical, and cross-functional teams, active participation in RFPs/proposals, and providing ongoing support to senior security staff and customers.Key Responsibilities:Technical &amp; Solution Design<ul><li>Design customized solutions addressing customer cybersecurity and IT infrastructure needs.</li><li>In-depth knowledge and hands-on experience in:</li><li>EDR/EPP/XDR</li><li>SIEM/SOC/SOAR</li><li>Email Security, NGFW, and Cloud Security</li><li>Endpoint Protection &amp; Patch Management</li><li>Network Security &amp; Monitoring</li><li>Vulnerability Assessment &amp; Penetration Testing (VAPT)</li><li>Identity &amp; Privileged Access Management (PAM/IAM)</li><li>Data Protection, DLP, Data Classification, and Backup Solutions</li><li>Assist in crafting technical proposals, presentations, RFPs, and tender responses.</li><li>Participate in pre-sales meetings, product demos, workshops, and proof-of-concepts.</li><li>Provide post-sales transition documentation and support delivery teams.</li></ul>Security Operations &amp; Compliance Support<ul><li>Monitor and respond to alerts from EDR, EPP, XDR, and SIEM tools under senior guidance.</li><li>Support incident response activities, including investigation, escalation, and remediation.</li><li>Assist in GRC (Governance, Risk &amp; Compliance) processes, security audits, and documentation.</li><li>Support the implementation of data classification policies and security awareness initiatives.</li><li>Keep documentation updated for security tools, processes, and SOPs.</li></ul>Client Interaction &amp; Support<ul><li>Understand client challenges and recommend appropriate solutions.</li><li>Provide day-to-day support to senior security staff in ongoing projects and operations.</li><li>Handle L1/L2 client queries and ensure timely escalation/resolution.</li><li>Ensure client satisfaction throughout the engagement lifecycle.</li></ul>Collaboration &amp; Knowledge Sharing<ul><li>Work closely with internal teams to ensure smooth delivery of solutions.</li><li>Stay current with emerging cybersecurity threats, technologies, and best practices.</li><li>Mentor junior team members and contribute to team capability building.</li></ul>Required Skills &amp; Qualifications:<ul><li>Minimum 3 years of experience in Pre-Sales, Cybersecurity, or related roles.</li><li>Strong understanding of cybersecurity frameworks, IT infrastructure, and security operations.</li><li>Experience with RFPs, proposals, and technical documentation.</li><li>Excellent communication, presentation, and client-facing skills.</li><li>Strong documentation, proposal writing, and technical storytelling capabilities.</li><li>Ability to manage multiple tasks and deliverables under pressure.</li><li>Fluency in English (spoken and written).</li></ul>Preferred Certifications (Optional but Advantageous):<ul><li>CISSP / CISM / CEH / CompTIA Security+</li><li>Microsoft / AWS / Google Cloud Certifications</li><li>ITIL / PMP</li><li>Vendor-specific certifications (e.g., Palo Alto, Fortinet, Trend Micro, SentinelOne)</li></ul>Job Type: Full-timeExperience:<ul><li>Cybersecurity presales: 1 year (Required)</li></ul>License/Certification:<ul><li>UAE driving liecence (Required)</li></ul>Location:<ul><li>Dubai (Required)</li></ul>

Cybersecurity Presales Engineer

Schneider Electric

<div>
 
 
 We are looking for The Cybersecurity Engineer (CE) to be dedicated to the Schneider
 
 
 
 Electric Enterprise Network and Security Services team that provides lifecycle security services for
 
 
 
 customers.
 
 
 
 
 
 
 Key Tasks:
 
 
 
 
 
 
 The Cybersecurity Engineer has primary responsibility for technical execution / delivery of security
 
 
 
 solutions to customers. While executing a Schneider Electric security solution, the CE will represent
 
 
 
 Schneider Electric as a technical leader with the proficiency to implement technical security solutions.
 
 
 
 Solutions will be composed of key elements that meet the customer needs. The CE will manage the
 
 
 
 implementation of solutions, perform site visits to maintain the security solution, provide security training,
 
 
 
 and consult on security matters when required. The CE will ensure that the security infrastructure required
 
 
 
 to support Schneider Electric applications is in place. The CE may also function as a requirements
 
 
 
 analyst and serve as the conduit between the customer and the Schneider Electric Delivery Organization.
 
 
 
 The CE will be required to evaluate existing and new technologies to determine their applicability and
 
 
 
 value for inclusion in the Schneider Electric security solutions, and communicate his or her thoughts to
 
 
 
 the UAE Cybersecurity Operations Manager or the Global Cybersecurity Director.
 
 
 <ul>
 <li>
 
 Work with the product manager or project sponsor to successfully implement the Schneider
 
 
 
 Electric Security solutions and associated applications
 
 </li>
 <li>
 
 Configuration of any approved host and network security solutions
 
 </li>
 <li>
 
 Configuration of Network Performance Monitoring and Management solutions
 
 </li>
 <li>
 
 Oversee any required modification or reconfiguration of network elements
 
 </li>
 <li>
 
 Manage installation and connectivity testing of the security solutions
 
 </li>
 <li>
 
 Lead application acceptance testing (from a security perspective)
 
 </li>
 <li>
 
 Develop and deliver end user training
 
 </li>
 <li>
 
 Develop and deliver technical documentation as required
 
 </li>
 <li>
 
 Technical research to meet security solution requirement
 
 </li>
 </ul>
 
 
 Credentials:
 
 
 <ul>
 <li>
 5+ years of experience in OT Industrial Control System
 </li>
 <li>
 3+ years performing the installation and/or management of network-based firewalls, preferably
 
 Cisco, Fortinet, Juniper or another top-tier product.
 </li>
 <li>
 3+ years performing network troubleshooting using sniffers and monitors.
 </li>
 <li>
 3+ years performing the installation and/or management of network-based Intrusion Detection
 
 products.
 </li>
 <li>
 3+ years advanced systems administration (Windows Active Directory)
 </li>
 <li>
 3+ years of experience in implementing Host-based security technologies (Antivirus, Data
 
 Leakage Prevention, Host IPS, Whitelisting)
 </li>
 <li>
 3+ years of experience in implementing system backup technologies
 </li>
 <li>
 Understanding of high-availability networking technologies
 </li>
 <li>
 Experience working in a mixed environment of both standard TCP/IP and nonstandard
 
 networking protocols
 </li>
 <li>
 Experience in developing, evaluating, implementing Security Policy and Procedures
 </li>
 <li>
 Experience with the Schneider Electric product line and Industries is desirable but not essential
 </li>
 <li>
 Experience with LAN, WAN and technologies
 </li>
 <li>
 Facilitation skills to lead requirements discovery workshops and project scope change
 
 requirements
 </li>
 <li>
 Analytical skills to critically evaluate the information gathered from multiple sources, reconcile
 
 conflicts, decompose high-level information into details, abstract up from low-level information to
 
 a more general understanding, distinguish presented user requests from the underlying true
 
 needs, and distinguish solution ideas from requirements
 </li>
 <li>
 Observational skills to validate data obtained via other techniques and expose new areas for
 
 elicitation
 </li>
 <li>
 Writing skills to communicate information effectively to customers, Project Managers, and
 
 technical staff
 </li>
 <li>
 Organizational skills to work with the vast array of information gathered during elicitation and
 
 analysis to cope with rapidly changing information and be able to apply this
 </li>
 <li>
 Interpersonal skills, to help negotiate customer priorities and to resolve conflicts among project
 
 stakeholders
 </li>
 </ul>
 
 
 Qualifications:
 
 
 <ul>
 <li>
 Bachelor&rsquo;s Degree in a computer related field, plus one of the following certifications:
 </li>
 <li>
 Cisco Certified Network Associate Security (CCNA Security)
 </li>
 <li>
 Certified Information Systems Security Professional (CISSP)
 </li>
 <li>
 ISA99 or IC32-34 related OT certification
 </li>
 </ul>
 
 
 Competencies:
 
 
 <ul>
 <li>
 Based in Oman
 </li>
 <li>
 Independent, self-sufficient, able to work alone without direct supervision.
 </li>
 <li>
 Capable of taking full responsibility for executing tasks, sometimes at remote locations.
 </li>
 <li>
 Confident in customer project environment.
 </li>
 <li>
 Able to show initiative, make quick decisions, and follow through to a conclusion.
 </li>
 <li>
 Travel required 50% or more during heavy project and services loads
 </li>
 </ul>
 
 &nbsp;
 
 
 
 
 
 Looking to make an IMPACT with your career?
 
 
 
 
 
 
 When you are thinking about joining a new team, culture matters. At Schneider Electric, our values and behaviors are the foundation for creating a great culture to support business success. We believe that our&nbsp; IMPACT values - Inclusion, Mastery, Purpose, Action, Curiosity, Teamwork - starts with us.
 
 
 
 
 IMPACT is also your invitation to join Schneider Electric where you can contribute to turning sustainability ambition into actions, no matter what role you play. It is a call to connect your career with the ambition of achieving a more resilient, efficient, and sustainable world.
 
 
 
 
 We are looking for IMPACT Makers; exceptional people who turn sustainability ambitions into actions at the intersection of automation, electrification, and digitization. We celebrate IMPACT Makers and believe everyone has the potential to be one.
 
 
 
 
 Become an IMPACT Maker with Schneider Electric - apply today!
 
 
 
 
 &euro;36 billion global revenue
 
 
 
 +13% organic growth
 
 
 
 150 000+ employees in 100+ countries
 
 
 
 #1 on the Global 100 World&rsquo;s most sustainable corporations
 
 
 
 &nbsp;
 
 
 
 
 &nbsp;
 
 
 
 You must submit an online application to be considered for any position with us. This position will be posted until filled.
 
 
 
 &nbsp;
 
 
 
 
 Schneider Electric aspires to be the most inclusive and caring company in the world, by providing equitable opportunities to everyone, everywhere, and ensuring all employees feel uniquely valued and safe to contribute their best. We mirror the diversity of the communities in which we operate, and &lsquo;inclusion&rsquo; is one of our core values. We believe our differences make us stronger as a company and as individuals and we are committed to championing inclusivity in everything we do.
 
 
 
 
 &nbsp;
 
 
 
 
 At Schneider Electric, we uphold the highest standards of ethics and compliance, and we believe that trust is a foundational value. Our Trust Charter is our Code of Conduct and demonstrates our commitment to ethics, safety, sustainability, quality and cybersecurity, underpinning every aspect of our business and our willingness to behave and respond respectfully and in good faith to all our stakeholders. You can find out more about our Trust Charter here
 
 
 
 
 
 &nbsp;
 
 
 
 
 
 Schneider Electric is an Equal Opportunity Employer. It is our policy to provide equal employment and advancement opportunities in the areas of recruiting, hiring, training, transferring, and promoting all qualified individuals regardless of race, religion, color, gender, disability, national origin, ancestry, age, military status, sexual orientation, marital status, or any other legally protected characteristic or conduct.
 
 
 
 
 &nbsp;
 
 
 &nbsp;
 
 
 &nbsp;
 
 
 &nbsp;
 
</div>

Cybersecurity Senior Engineer

Virtu Thinko

Role PurposeOwns and leads the unified vulnerability and patch management service across all organizational assets. Responsible for end-to-end delivery, governance, reporting, and KPI compliance in line with defined risk-management and regulatory frameworks.Key Responsibilities<ul><li>Lead vulnerability lifecycle management using Qualys VMDR integrated with ServiceNow.</li></ul>*<ul><li>Oversee asset discovery, scanning, prioritization, and remediation across servers, endpoints, and applications.</li></ul>*<ul><li>Define and enforce patching strategy, ensuring CVSS-based remediation within SLA thresholds (7 / 14 / 30-day windows).</li></ul>*<ul><li>Supervise manual patching of production systems, validate rollback plans, and coordinate maintenance windows.</li></ul>*<ul><li>Generate weekly and monthly KPI dashboards, tracking open vulnerabilities, SLA compliance, and risk scores.</li></ul>*<ul><li>Align with compliance standards &mdash; ISO 27001, NIST 800-40, CIS v8, PCI DSS &mdash; and prepare audit-ready evidence.</li></ul>*<ul><li>Mentor and train the junior team on vulnerability analysis, patch deployment, and incident response.</li></ul>*<ul><li>Coordinate escalations, change control, and documentation with Information Security and IT Governance teams.</li></ul>*<ul><li>Contribute to continuous-improvement initiatives and regulatory reporting.</li></ul>Qualifications &amp; Skills<ul><li>Bachelor&rsquo;s degree in Cybersecurity, Computer Science, or related field.</li></ul>*<ul><li>5+ years&rsquo; experience in vulnerability management and patch operations.</li></ul>*<ul><li>Proven expertise with Qualys, ServiceNow, and enterprise patch-management tools (SCCM, Ansible, WSUS).</li></ul>*<ul><li>Strong knowledge of CVSS scoring, threat intelligence correlation, and risk prioritization.</li></ul>*<ul><li>Familiarity with ITIL change / incident processes.</li></ul>*<ul><li>Certifications preferred: CISSP, CISM, CRISC, CompTIA Security+, or Qualys VMDR Specialist.</li></ul>*<ul><li>Strong leadership, documentation, and stakeholder-communication skills.</li></ul>Job Types: Full-time, Contract Contract length: 12 monthsPay: BD1,200.000 - BD2,000.000 per month

Senior Cybersecurity Engineer – Vulnerability Management

Nets-international Communication

Overview The Cybersecurity Engineer will be responsible for identifying, analyzing, and mitigating security vulnerabilities across systems, applications, and networks. This role includes conducting Vulnerability Assessments, Penetration Testing (VAPT), Digital Forensics &amp; Incident Response (DFIR), Red Team exercises, and Security Posture Assessments. The ideal candidate will have a deep understanding of frameworks such as MITRE ATT&amp;CK and OWASP, and will work to strengthen the organization&rsquo;s security defenses against evolving threats.Key ResponsibilitiesVulnerability Assessment &amp; Penetration Testing (VAPT)<ul><li>Conduct web, network, mobile, and API penetration tests using tools and manual testing methods.</li><li>Identify and exploit vulnerabilities, simulate attacks, and provide detailed remediation reports.</li><li>Perform security configuration reviews for systems, firewalls, and cloud infrastructure.</li><li>Develop automated scanning scripts and processes for continuous assessment.</li></ul>Red Teaming &amp; Threat Simulation<ul><li>Execute Red Team / Adversary Simulation exercises to evaluate real-world attack scenarios.</li><li>Map attack chains and techniques using the MITRE ATT&amp;CK framework.</li><li>Collaborate with Blue Teams to test detection, response, and containment capabilities.</li><li>Document findings and improve overall organizational cyber resilience.</li></ul>Digital Forensics &amp; Incident Response (DFIR)<ul><li>Investigate and respond to security incidents, breaches, and malware attacks.</li><li>Collect, preserve, and analyze digital evidence in line with forensic best practices.</li><li>Prepare detailed incident reports with timelines, root cause analysis, and corrective actions.</li><li>Support SOC and threat-hunting teams in real-time investigations.</li></ul>Security Posture &amp; Risk Assessment<ul><li>Conduct security posture reviews for IT assets, networks, and cloud environments.</li><li>Evaluate security controls and recommend strategies to reduce attack surface.</li><li>Perform gap analysis against industry standards (ISO 27001, NIST, CIS).</li><li>Support compliance and audit readiness initiatives.</li></ul>Security Research &amp; Development<ul><li>Stay current with emerging threats, exploits, and vulnerability disclosures.</li><li>Develop custom tools or scripts for exploit testing or automation.</li><li>Participate in bug bounty programs, CTFs, or security community contributions.</li></ul>Technical Skills &amp; ToolsVAPT Tools: Burp Suite, Metasploit, Nessus, Nmap, OWASP ZAP, Nikto, SQLMap Forensics Tools: Autopsy, FTK, EnCase, Volatility, Wireshark Red Team Tools: Cobalt Strike, Empire, BloodHound, Mimikatz, Metasploit Frameworks &amp; Methodologies: MITRE ATT&amp;CK, OWASP Top 10, NIST 800-53, CIS Controls Scripting: Python, Bash, PowerShell Cloud Security: Azure, AWS, GCP (optional but preferred) Other: SIEM (Splunk, ELK, QRadar), EDR tools, Threat Intel platformsQualifications &amp; Experience<ul><li>Bachelor&rsquo;s or Master&rsquo;s in Computer Science, Cybersecurity, or a related field.</li><li>3&ndash;6 years of hands-on experience in penetration testing, incident response, or red teaming.</li><li>Strong knowledge of network protocols, system internals, and web technologies.</li><li>Familiarity with MITRE ATT&amp;CK, OWASP, and Kill Chain models.</li></ul>Job Type: Full-timeAbility to commute/relocate:<ul><li>&#305;stanbul: Reliably commute or planning to relocate before starting work (Required)</li></ul>Application Question(s):<ul><li>what is your monthly current salary?</li><li>what is your monthly expected salary?</li><li>what is your notice period?</li></ul>Education:<ul><li>Bachelor's (Preferred)</li></ul>Experience:<ul><li>Cybersecurity Engineer / Analyst (VAPT | DFIR | Red Team: 4 years (Required)</li></ul>

Cybersecurity Engineer / Analyst (VAPT | DFIR | Red Team | Posture Assessment)

Overview The Cybersecurity Engineer will be responsible for identifying, analyzing, and mitigating security vulnerabilities across systems, applications, and networks. This role includes conducting Vulnerability Assessments, Penetration Testing (VAPT), Digital Forensics &amp; Incident Response (DFIR), Red Team exercises, and Security Posture Assessments. The ideal candidate will have a deep understanding of frameworks such as MITRE ATT&amp;CK and OWASP, and will work to strengthen the organization&rsquo;s security defenses against evolving threats.Key ResponsibilitiesVulnerability Assessment &amp; Penetration Testing (VAPT)<ul><li>Conduct web, network, mobile, and API penetration tests using tools and manual testing methods.</li><li>Identify and exploit vulnerabilities, simulate attacks, and provide detailed remediation reports.</li><li>Perform security configuration reviews for systems, firewalls, and cloud infrastructure.</li><li>Develop automated scanning scripts and processes for continuous assessment.</li></ul>Red Teaming &amp; Threat Simulation<ul><li>Execute Red Team / Adversary Simulation exercises to evaluate real-world attack scenarios.</li><li>Map attack chains and techniques using the MITRE ATT&amp;CK framework.</li><li>Collaborate with Blue Teams to test detection, response, and containment capabilities.</li><li>Document findings and improve overall organizational cyber resilience.</li></ul>Digital Forensics &amp; Incident Response (DFIR)<ul><li>Investigate and respond to security incidents, breaches, and malware attacks.</li><li>Collect, preserve, and analyze digital evidence in line with forensic best practices.</li><li>Prepare detailed incident reports with timelines, root cause analysis, and corrective actions.</li><li>Support SOC and threat-hunting teams in real-time investigations.</li></ul>Security Posture &amp; Risk Assessment<ul><li>Conduct security posture reviews for IT assets, networks, and cloud environments.</li><li>Evaluate security controls and recommend strategies to reduce attack surface.</li><li>Perform gap analysis against industry standards (ISO 27001, NIST, CIS).</li><li>Support compliance and audit readiness initiatives.</li></ul>Security Research &amp; Development<ul><li>Stay current with emerging threats, exploits, and vulnerability disclosures.</li><li>Develop custom tools or scripts for exploit testing or automation.</li><li>Participate in bug bounty programs, CTFs, or security community contributions.</li></ul>Technical Skills &amp; ToolsVAPT Tools: Burp Suite, Metasploit, Nessus, Nmap, OWASP ZAP, Nikto, SQLMap Forensics Tools: Autopsy, FTK, EnCase, Volatility, Wireshark Red Team Tools: Cobalt Strike, Empire, BloodHound, Mimikatz, Metasploit Frameworks &amp; Methodologies: MITRE ATT&amp;CK, OWASP Top 10, NIST 800-53, CIS Controls Scripting: Python, Bash, PowerShell Cloud Security: Azure, AWS, GCP (optional but preferred) Other: SIEM (Splunk, ELK, QRadar), EDR tools, Threat Intel platformsQualifications &amp; Experience<ul><li>Bachelor&rsquo;s or Master&rsquo;s in Computer Science, Cybersecurity, or a related field.</li><li>3&ndash;6 years of hands-on experience in penetration testing, incident response, or red teaming.</li><li>Strong knowledge of network protocols, system internals, and web technologies.</li><li>Familiarity with MITRE ATT&amp;CK, OWASP, and Kill Chain models.</li></ul>Job Type: Full-timeAbility to commute/relocate:<ul><li>Muscat: Reliably commute or planning to relocate before starting work (Required)</li></ul>Application Question(s):<ul><li>what is your monthly current salary?</li><li>what is your monthly expected salary?</li><li>what is your notice period?</li></ul>Education:<ul><li>Bachelor's (Preferred)</li></ul>Experience:<ul><li>Cybersecurity Engineer / Analyst (VAPT | DFIR | Red Team: 4 years (Required)</li></ul>

Search 8491+ Cybersecurity engineer jobs near you this December. New roles added regularly across leading industries. Apply today.

8491 cybersecurity engineer jobs NEAR_ME

OT Cybersecurity Engineer

Cybersecurity Engineer

Cybersecurity Presales Engineer

Cybersecurity Senior Engineer

Senior Cybersecurity Engineer – Vulnerability Management

Cybersecurity Engineer / Analyst (VAPT | DFIR | Red Team | Posture Assessment)

Cybersecurity Engineer / Analyst (VAPT | DFIR | Red Team | Posture Assessment)