cloud & identity security engineer Jobs in Cairo

cloud & identity security engineer

nawy now property consultant Jobs in Cairo

nawy now property consultant

property consultant

application security analyst Jobs in Cairo

application security analyst

beauty consultant - faces - egypt Jobs in Cairo

beauty consultant - faces - egypt

security consultant

Accenture

<div>
 
 Title: Security Engineer Consultant - Cyber Fraud
 
 
 
 
 Location:  Cairo, Egypt
 
 
 
 
 Accenture Technology
 
 
 
 
 Through unmatched industry experience, leading technologies from our ecosystem partners and startups, and the largest delivery network in the world, we provide a powerful range of capabilities that can be tailored to our client&rsquo;s most complex business needs. With over 100 innovation hubs deployed around the world, we help clients continuously innovate at speed and at scale so they can outpace their peers. You will bring innovation, intelligence and industry experience together with the newest technologies to help clients innovate at scale and transform their businesses.
 
 
 
 Responsibilities
 
 
 
 
 <li>
 Conduct fraud risk assessments and cybercrime threat modeling across digital channels.
 
 </li>
 <li>
 Advise clients on fraud prevention frameworks, cyber controls, and detection strategies.
 
 </li>
 <li>
 Develop fraud risk management programs aligned with NIST, ISO 27001, and/or COBIT.
 
 </li>
 <li>
 Evaluate fraud management systems (e.g. SAS, Actimize, Falcon, RSA, ThreatMetrix).
 
 </li>
 <li>
 Analyze fraud trends (e.g. social engineering, ATO, phishing, deepfakes, mule accounts).
 
 </li>
 <li>
 Recommend cyber fraud detection rules, scoring models, or behavioral analytics techniques.
 
 </li>
 <li>
 Integrate cybersecurity measures (e.g. MFA, device ID, biometric verification, tokenization) into fraud controls.
 
 </li>
 <li>
 Support cyber investigations related to identity theft, insider fraud, or credential compromise.
 
 </li>
 <li>
 Collaborate with cybersecurity, IT, and legal teams on incident response plans and data breach scenarios.
 
 </li>
 <li>
 Support alignment with fraud-related regulatory expectations (e.g. SAMA, NCA, AML, CFF).
 
 </li>
 <li>
 Assist in preparing internal audit reports, compliance reviews, or regulator submissions.
 
 </li>
 <li>
 Stay up to date with fraud typologies and evolving cybercrime tactics.
 
 
 
 </li>
 
 Qualifications
 
 
 
 
 <li>
 Bachelor&rsquo;s degree in Cybersecurity, Computer Science, Risk Management, or related field.
 
 </li>
 <li>
 +5 years of experience in fraud risk, cybersecurity, digital payments, or financial crime.
 
 </li>
 <li>
 Knowledge of fraud platforms (e.g. Falcon, SAS, ThreatMetrix) and cybersecurity controls (e.g. SIEM, IAM).
 
 </li>
 <li>
 Experience in digital banking, e-commerce, fintech, or public sector is a plus.
 
 </li>
 <li>
 Certifications such as CFE, CISA, CISSP, CEH, or CRISC are highly desirable.
 
 </li>
 <li>
 Strong analytical, communication, and stakeholder management skills.
 
 
 
 </li>
</div>

Fraud Security Consultant

Deloitte

<div>
 
 Connect to your career at Deloitte
 
 
 
 
 Deloitte
 
 , established globally in 1845, is the world&rsquo;s largest and leading professional services firm, providing Audit &amp; Assurance, Tax &amp; Legal and Consulting and related services to public and private clients spanning multiple industries. Present in more than 150 countries, Deloitte is distinct in its ability to help clients solve their most complex problems, from strategy to implementation.
 
 
 Deloitte innovation hub (DIH) is a strategic initiative established by Deloitte North &amp; South Europe (NSE) to support our ambition to become the leading business transformation partner of choice for our clients and to expand and scale our delivery footprint across EMEA. With access to a scaled, diverse, highly skilled, motivated, and engaged workforce, DIH is delivering complex technical solutions for clients&rsquo; most complex business problems, across portfolios that include &lsquo;Strategy &amp; Transactions&rsquo;, &lsquo;Customer&rsquo;, &lsquo;Engineering, AI &amp; Data, &lsquo;Enterprise, Technology &amp; Performance&rsquo; and &lsquo;Cyber&rsquo;. DIH is aiming to become the destination for top talents in Egypt for a long, exciting career.
 
 
 We invest in outstanding people of diverse talents and backgrounds and empower them to achieve more than they could elsewhere. Our work combines advice with action and integrity. We believe that when our clients and society are stronger, so are we. Our organization has grown in scale and diversity, providing services across the region, with our shared culture remaining the same. We aim to help clients realize their ambitions, make a positive difference in society, and maximize the success of our people. This drive fuels the commitment and humanity that run deep through our every action.
 
 
 
 Connect to your opportunity.
 
 
 
 At Deloitte, you will make a real impact by working on diverse projects and collaborating with experts to deliver innovative solutions. As an
 
 Offensive Security Senior Engineer
 
 , you will focus on adversary emulation and red teaming to simulate advanced persistent threats (APTs) and cyberattacks. Using frameworks like MITRE ATT&amp;CK, you will test the resilience of our security controls and incident response capabilities. Additionally, you will conduct penetration testing on web applications, mobile apps, APIs, and networks, using scripting, defense evasion techniques, and code review to identify and exploit vulnerabilities.
 
 
 
 Your Role Might Include All The Following
 
 
 
 
 Red Teaming and Penetration Testing
 
 
 
 <ul>
 <li>
 Lead red team engagements to emulate the TTPs of advanced adversaries, using frameworks like MITRE ATT&amp;CK and Caldera to simulate real-world attack scenarios.
 </li>
 <li>
 Design and execute complex attack chains, including initial access, privilege escalation, lateral movement, data exfiltration, and persistence, to test the effectiveness of security controls.
 </li>
 <li>
 Simulate sophisticated threats such as nation-state actors, ransomware groups, and insider threats to identify gaps in detection and response processes.
 </li>
 <li>
 Conduct penetration testing across web applications, networks, cloud environments, and internal systems to identify vulnerabilities and validate red team findings.
 </li>
 <li>
 Test for vulnerabilities in web applications (e.g., SQL injection, XSS, CSRF, IDOR, OWASP Top 10), mobile apps (iOS and Android), and APIs (REST, GraphQL, SOAP).
 </li>
 <li>
 Use tools like Burp Suite, OWASP ZAP, Frida, and MobSF to identify and exploit vulnerabilities in diverse attack surfaces.
 
 
 </li>
 </ul>
 
 Web Application Security
 
 
 
 <ul>
 <li>
 Conduct in-depth penetration testing of web applications to identify vulnerabilities such as SQL injection, cross-site scripting (XSS), cross-site request forgery (CSRF), insecure direct object references (IDOR), and other OWASP Top 10 issues.
 </li>
 <li>
 Test for business logic flaws, session management issues, and authentication/authorization vulnerabilities in web applications.
 </li>
 <li>
 Use tools like Burp Suite, OWASP ZAP, and manual techniques to identify and exploit web application vulnerabilities.
 
 
 </li>
 </ul>
 
 Scripting and Automation
 
 
 
 <ul>
 <li>
 Write and maintain custom scripts (e.g., in Python, PowerShell, Bash, or JavaScript) to automate attack techniques, payloads, and reconnaissance processes for web, mobile, and API testing.
 </li>
 <li>
 Build tools to streamline pentesting workflows, such as automated vulnerability scanning, exploitation, and post-exploitation activities.
 </li>
 <li>
 Create scripts to bypass web application firewalls (WAFs), evade detection, and test the resilience of blue team defenses.
 
 
 </li>
 </ul>
 
 Defense Evasion Techniques
 
 
 
 <ul>
 <li>
 Research and implement advanced defense evasion techniques to bypass endpoint detection and response (EDR), antivirus, WAFs, and other security solutions.
 </li>
 <li>
 Develop obfuscation methods for payloads and exploits to avoid detection by SIEM, IDS/IPS, and other monitoring tools.
 </li>
 <li>
 Stay updated on the latest evasion techniques and adapt strategies to simulate sophisticated adversaries targeting web applications and other systems.
 
 
 </li>
 </ul>
 
 Code Review &amp; Secure Development
 
 
 
 <ul>
 <li>
 Perform thorough code reviews to identify vulnerabilities in web applications, APIs, and mobile apps, focusing on languages such as Java, JavaScript, Python, PHP, or C#.
 </li>
 <li>
 Identify insecure coding practices, such as improper input validation, lack of output encoding, and insecure API integrations.
 </li>
 <li>
 Collaborate with development teams to provide actionable recommendations for secure coding practices and remediation of identified vulnerabilities.
 
 
 </li>
 </ul>
 
 Mobile and API Security
 
 
 
 <ul>
 <li>
 Perform penetration testing on mobile applications (iOS and Android) to identify vulnerabilities such as insecure storage, improper session handling, and weak authentication mechanisms.
 </li>
 <li>
 Assess API security (REST, GraphQL, SOAP) for issues like broken authentication, excessive data exposure, and lack of rate limiting.
 </li>
 <li>
 Use tools like Burp Suite, Frida, and MobSF to analyze mobile and API attack surfaces and develop exploits for identified vulnerabilities.
 
 
 </li>
 </ul>
 
 Connect To Your Skills And Professional Experience
 
 
 
 <ul>
 <li>
 Bachelor&rsquo;s degree in Cybersecurity, information technology, computer science, or a relevant degree.
 </li>
 <li>
 Minimum 3 to 7 years of hands-on experience in penetration testing, red teaming, or related offensive security roles.
 </li>
 <li>
 Analytical capabilities, critical thinking, and problem-solving mindset (ability to analyze complex data and information to identify key insights and trends).
 </li>
 <li>
 Proficient in English speaking and writing.
 </li>
 <li>
 Flexibility for travel and working hours.
 </li>
 <li>
 strong proficiency in web application pentesting tools such as Burp Suite, OWASP ZAP, and manual testing techniques.
 </li>
 <li>
 Proficiency in scripting languages such as Python, PowerShell, Bash, or JavaScript for automation and tool development.
 </li>
 <li>
 Deep understanding of defense evasion techniques, including bypassing WAFs, EDR, and AV solutions.
 </li>
 <li>
 Expertise in code review for identifying vulnerabilities in web applications, APIs, and mobile apps.
 </li>
 <li>
 Strong knowledge of mobile security testing tools (e.g., Frida, MobSF, Drozer) and API testing tools (e.g., Postman, Burp Suite).
 </li>
 <li>
 Familiarity with common pentesting tools like Metasploit, Nmap, Cobalt Strike, BloodHound, and Kali Linux.
 </li>
 <li>
 Understanding of cloud environments (AWS, Azure, GCP) and their associated attack vectors.
 
 
 </li>
 </ul>
 
 The Following Attributes Are Also Preferable
 
 
 
 <ul>
 <li>
 Relevant certifications such as OSCP, OSWE, OSEP, CRTO, CRTP, GWAPT, GXPN, or equivalent are a plus.
 </li>
 <li>
 Active participation in CTF competitions with demonstrated achievements.
 </li>
 <li>
 Experience with penetration testing of AI systems and Large Language Models (LLMs), including testing for vulnerabilities like prompt injection, data poisoning, model inversion, or adversarial attacks.
 </li>
 <li>
 Experience with adversary emulation frameworks like MITRE ATT&amp;CK or Caldera.
 </li>
 <li>
 Knowledge of secure software development lifecycle (SDLC) and DevSecOps practices.
 </li>
 <li>
 Contributions to the security community through blogs, tools, or conference talks.
 </li>
 <li>
 Familiarity with container security (Docker, Kubernetes) and serverless architectures.
 
 
 </li>
 </ul>
 
 Personal Independence
 
 
 
 Regulation and controls are standard practice in our industry and Deloitte is no exception. These controls provide important legal protection for both you and the firm. We are subject to several audit regulations, one of which requires that certain colleagues abide by specific personal independence constraints. This can mean that you and your "Immediate Family Members" are not permitted to hold certain financial interests (shares, funds, bonds etc.) with audit clients of the firm. The recruitment team will provide further detail as you progress through the recruitment process.
 
 
 
 Connect with your colleagues
 
 
 
 Location: Cairo, Egypt
 
 
 &ldquo;What attracted me to Deloitte were the endless opportunities and the collective experience of other like-minded individuals. Deloitte&rsquo;s clients include many of the world&rsquo;s largest organizations; I wanted to be part of a team that made a difference that I could be proud of.&rdquo; -Dan, Technology &amp; Transformation
 
 
 &ldquo;Everyone always says, &ldquo;it&rsquo;s the people,&rdquo; and that&rsquo;s true. Working for a brand you feel proud of feels pretty good too. And you don&rsquo;t have any stress about fitting into a particular stereotype, because there are so many different types of people in Deloitte Digital.&rdquo; &ndash; Gillian, Technology &amp; Transformation
 
 
 
 Our commitment to you
 
 
 
 Making an impact is more than just what we do: it&rsquo;s why we&rsquo;re here. So, we work hard to create an environment where you can experience a purpose you believe in, the freedom to be you, and the capacity to go further than ever before.
 
 
 We want you. The true you. Your own strengths, perspective, and personality. So, we&rsquo;re nurturing a culture where everyone belongs, feels supported and heard, and is empowered to make a valuable, personal contribution. You can be sure we&rsquo;ll take your wellbeing seriously, too. Because it&rsquo;s only when you&rsquo;re comfortable and at your best that you can make the kind of impact you, and we, live for.
 
 
 Your expertise is our capability, so we&rsquo;ll make sure it never stops growing. Whether it&rsquo;s from the complex work you do, or the people you collaborate with, you&rsquo;ll learn every day. Through world-class development, you&rsquo;ll gain invaluable technical and personal skills. Whatever your level, you&rsquo;ll learn how to lead.
 
 
 
 Connect to your next step
 
 
 
 A career at Deloitte is an opportunity to develop in any direction you choose. Join us and you&rsquo;ll experience a purpose you can believe in and an impact you can see. You&rsquo;ll be free to bring your true self to work every day. And you&rsquo;ll never stop growing, whatever your level.
 
 
</div>

Deloitte Innovation Hub | Cyber Security | Offensive Security Senior Engineer, Cairo, Egypt.

<div>
 
 Introduction
 
 
 
 The Cybersecurity Lead within CSS practice helps to lead the growth and management of all facets of the business in Cyber Security Services (CSS). They must demonstrate a track record in Security thought leadership, sales leadership and delivery leadership and Consulting skills and deep knowledge in core security domains.
 
 
 
 Your Role And Responsibilities
 
 
 
 Demonstrate experience in areas of:
 
 
 <ul>
 <li>
 Working with teams and across local geographies to provide content to drive deals
 </li>
 <li>
 Demonstrating Security expertise in one or more industry sectors
 </li>
 <li>
 Becoming a recognized thought leader in security, utilizing conferences, white papers, client presentations to build awareness of IBM credentials
 </li>
 <li>
 Driving security order booking/signing and track record of delivering against $ target
 </li>
 <li>
 Taking ownership of end-end delivery of security work for client, and ensure what&rsquo;s sold is getting delivered to satisfaction of client
 </li>
 <li>
 Establishing strong client relationships in key accounts to help progress the Security Services portfolio
 </li>
 <li>
 Track record of personal billability in delivering work for clients
 </li>
 <li>
 Providing leadership by facilitating a community of like-minded security practitioners to share and exchange ideas for practice growth and improvement
 </li>
 <li>
 Becoming a role model for security practitioners in the security domains, by being the thought leader in the domain
 
 
 </li>
 </ul>
 
 Required Technical And Professional Expertise
 
 
 
 The Cybersecurity Lead within CSS practice helps to lead the growth and management of all facets of the business, primarily by using this position and perspective.
 
 
 This requires demonstrating track record in Security thought leadership, sales leadership and delivery leadership and Consulting skills and deep knowledge in at least one of the core security domains (Security Strategy Risk and Compliance, Identity Access Management, SOC / Security Operations, Application security, Data Security, Cloud security, Infrastructure &amp; Endpoint Security, Incident Response, Red team testing) and breadth across most security domains.
 
 
 
 Preferred Technical And Professional Experience
 
 
 
 <ul>
 <li>
 Bachelor&rsquo;s Degree or higher
 </li>
 <li>
 Experience in management consulting and systems integration in a top tier professional services firm
 </li>
 <li>
 Strong Consulting proven track record
 </li>
 <li>
 Strong Sales/Pre-sales proven track record
 </li>
 <li>
 Strong Practice/Offering building proven track record
 </li>
 <li>
 Strong track record in building relationships with internal and external senior stakeholders.
 </li>
 <li>
 Track record in delivery of projects
 </li>
 <li>
 Fluent English (required) proficiency in Danish (preferred)
 </li>
 </ul>
</div>

Cybersecurity Lead

Microsoft 365 Migration & Support Consultant

Alignerr

<div>
 
 About The Job
 
 
 
 At Alignerr, we partner with the world&rsquo;s leading AI research teams and labs to build and train cutting-edge AI models.
 
 
 We are seeking hands-on infrastructure security practitioners to analyze, classify, and evaluate real-world network and endpoint security scenarios. You will work with realistic enterprise environments to capture how threats, controls, and failures interact in production systems.
 
 
 
 Organization
 
 : Alignerr
 
 Position
 
 : Network &amp; Infrastructure Security Analyst
 
 Type
 
 : Contract / Task-Based
 
 Compensation
 
 : $35&ndash;$60 /hour
 
 Location
 
 : Remote
 
 Commitment
 
 : 10&ndash;40 hours/week
 
 
 
 What You&rsquo;ll Do
 
 
 
 <ul>
 <li>
 Analyze network, endpoint, and email security scenarios across modern enterprise stacks
 </li>
 <li>
 Review firewall, EDR, and infrastructure security cases to determine what went wrong and why
 </li>
 <li>
 Classify incidents, misconfigurations, and control failures based on real operational data
 </li>
 <li>
 Create, label, and validate security training and evaluation datasets used to improve AI systems
 
 
 </li>
 </ul>
 
 What We&rsquo;re Looking For
 
 
 
 <ul>
 <li>
 2+ years of experience in network, infrastructure, or endpoint security roles
 </li>
 <li>
 Familiarity with firewalls, EDR, email security, IAM, SIEMs, and enterprise tooling
 </li>
 <li>
 Strong understanding of how real organizations deploy and operate security controls
 </li>
 <li>
 Ability to clearly explain security issues, root causes, and business impact
 
 
 </li>
 </ul>
 
 Why Join Us
 
 
 
 <ul>
 <li>
 Competitive pay and flexible remote work
 </li>
 <li>
 Work directly on frontier AI and security systems
 </li>
 <li>
 Freelance perks including autonomy, flexibility, and global collaboration
 </li>
 <li>
 Potential for contract extension
 
 
 </li>
 </ul>
 
 Application Process (Takes 10&ndash;15 min)
 
 
 
 <ul>
 <li>
 Submit your resume
 </li>
 <li>
 Complete a short screening
 </li>
 <li>
 Project matching and onboarding
 
 
 </li>
 </ul>
 
 PS: Our team reviews applications daily. Please complete your AI interview and application steps to be considered for this opportunity.
 
</div>

Application Security Analyst

SWATX

<div>
 Role Overview
 
 
 The ideal candidate has deep experience in cybersecurity frameworks, risk management, regulatory
 
 
 alignment, audits, policy development, and leading enterprise GRC programs.
 
 
 The role includes working with government and regulated sectors, contributing to cybersecurity
 
 
 posture improvement, and ensuring client compliance with international and KSA-specific
 
 
 frameworks.
 
 
 This position is client-facing, leadership-oriented, and requires both strategic and hands-on GRC
 
 
 expertise.
 
 
 Top 5 Responsibilities
 
 
 <ul>
 <li>
 Lead GRC engagements including cybersecurity assessments, maturity evaluations, gap
 
 
 </li>
 </ul>
 analyses, and compliance improvement roadmaps.
 
 
 <ul>
 <li>
 Develop and implement cybersecurity governance frameworks, policies, procedures,
 
 
 </li>
 </ul>
 and standards aligned with ISO 27001, NCA ECC/CCC, NIST CSF, COBIT, and sector-
 
 
 specific mandates.
 
 
 <ul>
 <li>
 Conduct enterprise risk assessments, create risk treatment plans, and drive continuous
 
 
 </li>
 </ul>
 risk reduction programs with business stakeholders.
 
 
 <ul>
 <li>
 Manage internal/external audits, regulatory compliance initiatives, and coordinate with
 
 
 </li>
 </ul>
 client teams to ensure audit readiness and control effectiveness.
 
 
 <ul>
 <li>
 Provide strategic advisory on cybersecurity governance, operating models, KPIs, and
 
 
 </li>
 </ul>
 continuous improvement across government and enterprise environments.
 
 
 Must-Have Technologies &amp; Platforms Experience
 
 
 (Not technical hands-on configuration, but exposure in a GRC context)
 
 
 ∙SIEM / SOC Technologies: Microsoft Sentinel, Splunk, IBM QRadar
 
 
 ∙Network &amp; Security Platforms: Palo Alto, Fortinet, Cisco Security
 
 
 ∙EDR/XDR Platforms: CrowdStrike, Microsoft Defender XDR
 
 
 ∙Cloud Security: Microsoft Azure security controls, AWS Security Hub, CSP governance
 
 
 ∙GRC Tools: RSA Archer, ServiceNow GRC, MetricStream, OneTrust
 
 
 ∙Vulnerability Management: Tenable, Qualys, Rapid7
 
 
 Candidates must understand control requirements, governance, integration points, reporting
 
 
 outputs, and compliance mapping for these technology domains.
 
 
 Nice-to-Have Technologies
 
 
 ∙Knowledge of KSA-specific compliance platforms (NCA GRC portals, banking
 
 
 compliance portals)
 
 
 ∙Data Privacy and DLP Platforms (Microsoft Purview, Symantec, Forcepoint)
 
 
 ∙DevSecOps practices and CI/CD pipeline assessments
 
 
 ∙OT/ICS governance frameworks (NIST 800-82, IEC 62443)
 
 
 
 Required
 
 
 
 Required &amp; Preferred Certifications
 
 
 ∙ISO 27001 Lead Implementer (LI) or Lead Auditor (LA)
 
 
 ∙CGRC (formerly CAP) or equivalent risk-focused certification
 
 
 ∙CISM or CISSP (one required for Lead level)
 
 
 
 Preferred / Strong Plus
 
 
 
 ∙SABSA Foundation or Practitioner
 
 
 ∙COBIT 2019
 
 
 ∙ITIL 4 Foundation
 
 
 ∙NCA-specific training (ECC/CCC/CSM)
 
 
 ∙Cloud certifications: Azure Security Engineer, CCSK, CCSP
 
 
 
 Experience Requirements
 
 
 
 ∙7-10 years in cybersecurity governance, compliance, and risk management roles
 
 
 ∙Proven leadership in GRC project delivery with enterprise or government clients
 
 
 ∙Experience with KSA regulatory frameworks, such as:
 
 
 oNCA ECC v2 / CCC
 
 
 oSAMA CSF
 
 
 oCITC / CST Regulations
 
 
 oNDMO Data Governance
 
 
 ∙Experience designing cybersecurity programs and managing cross-domain teams
</div>

Cybersecurity GRC Expert

Explore 195+ Security consultant in Cairo this March. Find roles across top companies and apply now to boost your career.