sales consultant

safety officer

security guard

it specialist

it support engineer

security consultant

ISHRAQAT AL AMAL TECHNICAL SERVICES L.L.C

Information Security ConsultantLocation: Dubai Job Type: Full-Time Experience: 3&ndash;8 years in Information Security, Cybersecurity, or related domainsRole OverviewWe are looking for an Information Security Consultant with strong hands-on experience across security governance, cloud security, SOC operations, and vulnerability management. The ideal candidate should be able to enhance the organization&rsquo;s security posture, support compliance initiatives, and contribute to technical security assessments. A full match to every skill is not required, but candidates must demonstrate strong capability across most of the areas listed below.Key Responsibilities<ul><li>Support and maintain ISO 27001 compliance, documentation, audits, and security controls.</li><li>Implement and manage Data Loss Prevention (DLP) solutions.</li><li>Work with Microsoft Purview and other compliance tools for data governance and risk reduction.</li><li>Enhance and administer Azure security posture, including security configurations, monitoring, and remediation.</li><li>Conduct digital forensics investigations, incident analysis, and reporting.</li><li>Perform vulnerability assessments, remediation tracking, and risk reporting.</li><li>Deploy, configure, and optimize SOC tools and solutions; assist SOC teams in analysis and incident response.</li><li>Perform log fine-tuning and monitoring improvements across security systems.</li><li>Test, implement, and enhance Endpoint Detection &amp; Response (EDR) solutions.</li><li>Support or conduct penetration testing and red teaming (internal or external engagements).</li></ul>Required Skills (Strong proficiency in most of them)<ul><li>ISO 27001 Compliance</li><li>Data Loss Prevention (DLP)</li><li>Microsoft Purview &amp; Compliance tools</li><li>Azure Security Administration</li><li>Digital Forensics</li><li>Vulnerability Management</li><li>SOC Solutions (Implementation + Analysis)</li><li>Log Fine-Tuning</li><li>EDR Solutions (Testing &amp; Implementation)</li><li>Penetration Testing / Red Teaming</li></ul>Preferred CertificationsCandidates with any of the following certifications will be prioritized (not all required):<ul><li>SC-100 &ndash; Microsoft Cybersecurity Architect</li><li>ISO 27001 Audit Associate</li><li>Certified Ethical Hacker (CEH v12)</li><li>DLP Administrator Certification</li><li>SC-200 &ndash; Microsoft SOC Analyst</li><li>AZ-500 &ndash; Microsoft Azure Security Engineer Associate</li><li>Cloud Practitioner Certification</li><li>SC-300 &ndash; Microsoft Identity &amp; Access Administrator Associate</li></ul>Ideal Candidate Profile<ul><li>Strong technical understanding of cloud, endpoint, and network security.</li><li>Ability to work with minimal supervision and drive security initiatives.</li><li>Strong documentation, analytical, and problem-solving skills.</li><li>Exposure to enterprise security environments or consulting projects.</li></ul>Job Type: Full-timePay: AED10,000.00 - AED20,000.00 per monthApplication Question(s):<ul><li>How many years of hands-on experience do you have in Information Security (NOT IT support or networking)?</li><li>Have you directly worked with ISO 27001 (implementation, audits, or compliance)?</li><li>Have you implemented or managed any DLP solution (e.g., Microsoft, Symantec, Forcepoint)?</li><li>Rate your experience with Azure Security (0&ndash;10).</li></ul>What key configurations have you handled?<ul><li>Have you ever worked in a SOC environment (as an analyst or engineer)?</li><li>Do you have practical experience with EDR platforms (CrowdStrike, Defender, SentinelOne, etc.)?</li><li>Have you performed vulnerability assessments or penetration testing yourself (not just coordinating)?</li><li>List the relevant certifications you currently hold from this list:</li></ul>SC-100, SC-200, SC-300, AZ-500, CEH v12, ISO 27001, DLP Admin, Cloud Practitioner.<ul><li>What&rsquo;s your notice period? What&rsquo;s your expected salary range?</li></ul>

Information Security Consultant

CloudSEK

<div>
 
 
 WHO ARE WE?
 
 
 
 We are a bunch of super enthusiastic, passionate, and highly driven people, working to achieve a common goal! We believe that work and the workplace should be joyful and always buzzing with energy!
 
 
 
 
 CloudSEK,
 
 
 one of India&rsquo;s most trusted Cyber security product companies, is on a mission to build the world&rsquo;s fastest and most reliable AI technology that identifies and resolves digital threats in real-time. The central proposition is leveraging Artificial Intelligence and Machine Learning to create a quick and reliable analysis and alert system that provides rapid detection across multiple internet sources, precise threat analysis, and prompt resolution with minimal human intervention.
 
 
 Founded in 2015, headquartered at Singapore, we are proud to say that we&rsquo;ve grown at a frenetic pace and have been able to achieve some accolades along the way, including:
 
 
 
 
 
 
 CloudSEK&rsquo;s Product Suite:
 
 
 <ul>
 <li>
 CloudSEK
 
 XVigil
 
 constantly maps a customer&rsquo;s digital assets, identifies threats and enriches them with cyber intelligence, and then provides workflows to manage and remediate all identified threats including takedown support.
 </li>
 <li>
 A powerful Attack Surface Monitoring
 
 
 tool that gives visibility and intelligence on customers&rsquo; attack surfaces. CloudSEK's
 
 BeVigil
 
 uses a combination of Mobile, Web, Network and Encryption Scanners to map and protect known and unknown assets.
 </li>
 <li>
 CloudSEK&rsquo;s Contextual AI
 
 SVigil
 
 identifies software supply chain risks by monitoring Software, Cloud Services, and third-party dependencies.
 </li>
 </ul>
 
 
 
 
 
 Key Milestones:
 
 
 <ul>
 <li>
 
 2016
 
 : Launched our first product.
 </li>
 <li>
 
 2018
 
 : Secured Pre-series A funding.
 </li>
 <li>
 
 2019
 
 : Expanded operations to India, Southeast Asia, and the Americas.
 </li>
 <li>
 
 2020
 
 : Won the NASSCOM-DSCI Excellence Award for Security Product Company of the Year.
 </li>
 <li>
 
 2021
 
 : Raised $7M in Series A funding led by MassMutual Ventures.
 </li>
 <li>
 
 Awards &amp; Recognition
 
 : Won NetApp Excellerator's "Best Growth Strategy Award," CloudSEK XVigil joined NVIDIA Inception Program, and won the NASSCOM Emerge 50 Cybersecurity Award.
 </li>
 <li>
 
 2025
 
 : Secured $19 million in funding led by Tenacity Ventures, Commvault.
 </li>
 </ul>
 
 
 
 
 
 About the Role
 
 
 <ul>
 <li>
 Do you have a strong background and/or are actively passionate about
 
 offensive security and threat intelligence
 
 </li>
 <li>
 Do you love to
 
 ELI5 complex technical findings
 
 for diverse stakeholders, from SOC teams to CXOs and
 
 have excellent communication &amp; presentation skills
 
 to drive home business impact from these with confidence in high-stakes engagements.
 </li>
 <li>
 Are you hands-on with
 
 AI-driven automation
 
 in scaling your technical capacity?
 </li>
 <li>
 Do you love taking
 
 end-to-end responsibility for outcomes
 
 and thrive in a
 
 fast-paced, dynamic, self-driven and high-volume consulting environment?
 
 </li>
 </ul>
 
 
 
 
 
 Note: People from red - teaming background will be preferred.
 
 
 
 
 
 
 CloudSEK&rsquo;s
 
 Security Consulting Threat Research &amp; Intelligence for Key Enablement (STRIKE)
 
 Division operates at the intersection of threat research, consulting, and business enablement. As a Security Consultant for the MEA market, you will wear multiple hats: a
 
 trusted technical advisor
 
 during trials, a
 
 threat researcher
 
 uncovering insights tailored to regional risks, a
 
 consulting partner
 
 driving adoption through clear business impact to help position CloudSEK to our client partners as a strategic ally in their cyber resilience journey, and a community builder to expand CloudSEKs footprint and visibility in the region.
 
 
 
 
 
 
 Key Responsibilities
 
 
 <ul>
 <li>
 
 Technical Value Translation
 
 </li>
 <li>
 Lead new business
 
 trials and proof-of-capability (POC) engagements
 
 , ensuring successful demonstration of technical outcomes and translation of business impact by presenting CloudSEK&rsquo;s AI-driven predictive threat intelligence and infrastructure security capabilities to executives and security teams, bridging technical depth with business relevance.
 </li>
 </ul>
 
 
 
 <ul>
 <li>
 
 Threat Research &amp; Regional Intelligence
 
 </li>
 <li>
 Proactively track the Cyber Threat Landscape for the region.
 </li>
 <li>
 Investigate and track
 
 region-specific threats
 
 in MEA across government, telecom, BFSI, and enterprise sectors.
 </li>
 <li>
 Produce
 
 custom intelligence briefs, RFP responses, and exposure reports
 
 that highlight CloudSEK&rsquo;s proactive value.
 </li>
 </ul>
 
 
 
 <ul>
 <li>
 
 Partner Ecosystem Support
 
 </li>
 <li>
 Collaborate with
 
 partner security consultants
 
 to deliver onboarding, enablement, and co-selling activities.
 </li>
 <li>
 Act as a
 
 regional subject matter expert (SME)
 
 for partners, contextualizing CloudSEK&rsquo;s value within MEA threat landscapes.
 </li>
 </ul>
 
 
 
 <ul>
 <li>
 
 Thought Leadership &amp; Outreach
 
 </li>
 <li>
 Proactively build the CloudSEK community in the region by participating, contributing to as well as initiating and driving community events.
 </li>
 <li>
 Contribute to CloudSEK&rsquo;s
 
 lead generation efforts
 
 by creating research-driven reports and customer-facing intelligence insights.
 </li>
 <li>
 Represent CloudSEK at
 
 regional forums, webinars, and customer workshops
 
 , strengthening brand credibility.
 </li>
 </ul>
 
 
 
 
 
 Requirements
 
 
 <ul>
 <li>
 
 Experience in Cybersecurity &amp; Business-Oriented Consulting
 
 : Proven ability to lead and execute technical engagements (e.g., POCs, trials) and translate complex security concepts into clear business value for executives and technical teams.
 </li>
 <li>
 
 Expertise in Threat Intelligence and Research
 
 : Strong background in proactive cyber threat research, with specific knowledge of regional threat landscapes, particularly in the MEA region. Must be adept at producing custom intelligence briefs and insightful reports.
 </li>
 <li>
 
 Cross-Functional Collaboration and Partner Management
 
 : A collaborative mindset with experience working with and enabling a partner ecosystem. Must be a subject matter expert capable of supporting partners in co-selling and contextualizing solutions for regional markets.
 </li>
 <li>
 
 Demonstrated Thought Leadership and Communication Skills
 
 : A track record of creating research-driven content and insights for lead generation. Excellent public speaking and presentation skills to represent the company at regional events, webinars, and customer workshops.
 </li>
 <li>
 
 Proactive and Self-Driven
 
 : A highly motivated individual who can proactively identify, investigate, and address security threats, and take the initiative to build and grow the company's community and brand presence in the target region.
 </li>
 </ul>
 
 
</div>

Security Consultant - MEA

Nets-international Communication

Job Title: Pre-Sales Consultant &ndash; Network SecurityLocation: Dubai, United Arab EmiratesExperience: Minimum 5 Years in Network Security Pre-SalesEmployment Type: Full-TimeJob Summary:We are looking for a highly skilled and motivated Pre-Sales Consultant &ndash; Network Security with a minimum of 5 years of relevant experience in cybersecurity technologies. The ideal candidate will have strong hands-on experience with advanced security solutions including NGFW, IPS, WAF, Email Security, SASE, SSE, PAM, SIEM, SOAR, SWG, EDR, and NDR, along with a solid background in networking concepts. The candidate should be able to engage with clients, understand their security requirements, and design suitable solutions using industry-leading technologies.Key Responsibilities:&middot; Engage with enterprise and mid-market clients to assess security posture and propose tailored solutions.&middot; Design, present, and deliver technical solutions and architectures for a wide range of cybersecurity use cases.&middot; Conduct product demonstrations, technical workshops, and proof-of-concepts (POCs).&middot; Assist the sales team with solution positioning, value proposition, and competitive differentiators.&middot; Prepare RFP/RFI responses, solution documents, BOQ, BOMs, and other presales documentation.&middot; Work closely with post-sales teams to ensure successful solution deployment and client satisfaction.&middot; Keep updated with the latest threat landscape, cybersecurity frameworks, and vendor product developments.Technical Skills &amp; Experience Required:&middot; 5+ years of experience in network security pre-sales or solution consulting.&middot; Hands-on expertise in the following technologies:o NGFW / IPSo Web Application Firewall (WAF)o Email Securityo SASE / SSEo EDR (Endpoint Detection &amp; Response)o NDR (Network Detection &amp; Response)o PAM (Privileged Access Management)o SIEM &amp; SOARo Secure Web Gateway (SWG)&middot; Good knowledge of networking principles including routing, switching, VPNs, and protocols.&middot; Strong solution design experience across hybrid and multi-cloud environments.Vendor/Product Experience (Hands-On Preferred):&middot; Fortinet (NSE-certified)&middot; Cisco (Security solutions including Firepower, Umbrella, SecureX etc.)&middot; Palo Alto Networks&middot; Check Point&middot; Trellix (McAfee EDR/NDR)&middot; Exposure to additional vendors like Mimecast, F5, Splunk, ManageEngine is a plus.Certifications:&middot; Cisco CCNP Security (Mandatory)&middot; Fortinet NSE4, NSE5, NSE7 (Mandatory)&middot; Palo Alto PCNSE&middot; Other relevant security certifications are a plusSoft Skills:&middot; Strong communication, interpersonal, and presentation skills.&middot; Ability to translate business needs into technical solutions.&middot; Strong documentation and proposal-writing capabilities.&middot; Self-motivated, team player, and able to manage multiple priorities effectively.Qualifications:Bachelor&rsquo;s degree in Computer Science, Information Security, or a related field. Advanced degrees or equivalent professional experience will be an added advantage.Job Type: Full-timeAbility to commute/relocate:<ul><li>Dubai: Reliably commute or planning to relocate before starting work (Required)</li></ul>Application Question(s):<ul><li>What is your current salary?</li><li>what is your expected salary?</li><li>what is your notice period?</li></ul>Education:<ul><li>Bachelor's (Preferred)</li></ul>Experience:<ul><li>Presales: 7 years (Required)</li></ul>License/Certification:<ul><li>CCNP (Required)</li></ul>

Network Security Pre-Sales Consultant

TGC Middle East

The Role
 This opportunity is with our client — a leading diversified holding company in the UAE. Key Responsibilities -Perform secure design/code reviews and threat modelling across SDLC. -Lead application penetration tests and vulnerability assessments. -Collaborate with Dev, Product & Security teams to strengthen controls. -Drive remediation of security findings and support incident response. -Promote secure coding practices and application hardening standards. -Ensure compliance with data protection regulations (GDPR + regional). -Evaluate cloud architectures (Azure/GCP/OCI) and identify risks. -Translate DevSecOps recommendations into practical security actions. -Maintain security documentation and align with OWASP standards.
 
Requirements
 Required Skills & Experience -3–4 years in Application / Offensive Security. -Hands-on in Web, Mobile, API, Cloud & Infrastructure Pentesting. -Threat modelling, code review & attack-surface assessment. -Experience with CI/CD security and DevSecOps tooling. -Scripting: Python / Bash / PowerShell. -Tools: Burp Suite, Metasploit, Nessus, Wireshark, Nmap, Cobalt Strike etc. -Knowledge of Windows/Linux internals & cloud environments. Qualifications -Bachelor’s in Computer Engineering / Information Security or related field. -Preferred: OSCP, CEH, Cloud Security Certification (Azure/GCP/OCI/AWS).
 
About the company
 TGC Consulting is a Human Resources Solutions provider based in Dubai, UAE. We provide Recruitment & HR Outsourcing services to organizations services tailored to meet the needs of organizations across various industries across the Middle East. At TGC Consulting, we are more than just a Recruitment company we are your strategic partner in talent management. Our team comprises industry experts who are passionate about aligning exceptional talent with organizational needs. Our Services include Executive Search - Permanent Recruitment / Emiratisation & Saudization. Staffing & Outsourcing- Contract Staffing & RPO

Application Security Engineer - Emiratisation

DICETEK LLC

<div>We are looking for highly skilled cybersecurity consultants with extensive hands-on experience in SOC design, SIEM engineering, Incident Response, Threat Detection, and building cybersecurity maturity. Consultants should be proficient in building SOCs from scratch, developing SIEM use-cases, MITRE mapping, IR playbooks, and defining cybersecurity strategy.
Key Responsibilities:
Lead technical cybersecurity discussions with IT, vendors, and stakeholders.
Ensure alignment with regulatory requirements and security best practices.
Enhance and maintain SIEM/SOC operations, including rule tuning, process development, and SOC setup (if needed).
Required Expertise:
Strong hands-on experience in SIEM/SOC design and operations
Cybersecurity governance and risk management
Security architecture reviews
Ability to engage effectively with IT/Security teams
Experience in banking, finance, telco, or enterprise environments
15&ndash;20 years of practical cybersecurity experience 
1 Cybersecurity Architecture Assessment &amp; Strategy<ul><li>
Lead a full end-to-end evaluation of the organization&rsquo;s existing SIEM architecture, SOC operations, and IR capabilities.</li><li>
Assess effectiveness across people, processes, and technology, identifying strengths, gaps, and opportunities for enhancement.</li><li>
Benchmark current cybersecurity maturity against industry standards (e.g., NIST CSF, ISO 27001, MITRE ATT&amp;CK).</li><li>
Develop a prioritized roadmap for SIEM/SOC/IR optimization and modernization.</li></ul>
2. SIEM Optimization &amp; Enhancement<ul><li>
Redesign SIEM architecture and data ingestion strategy to improve visibility, performance, and event fidelity.</li><li>
Enhance log parsing, normalization, enrichment, and ingestion from critical sources (cloud, endpoints, identity, OT/ICS, network, and security tools).</li><li>
Refine correlation logic, detection use cases, and alert tuning methodologies to reduce false positives and increase detection accuracy.</li><li>
Implement advanced detection techniques mapped to MITRE ATT&amp;CK, including custom rules, dashboards, and analytics.</li><li>
Establish SIEM governance processes, rule-tuning standards, and performance optimization practices.</li></ul>
3. SOC Maturity Improvement &amp; Operational Excellence<ul><li>
Conduct a deep review of SOC workflows, tiered responsibilities, shift coverage, and tooling integration.</li><li>
Redesign triage and escalation workflows to improve response efficiency and adherence to SLAs.</li><li>
Enhance tool interoperability (SIEM, SOAR, ticketing, TIP, EDR) to streamline end-to-end detection and response.</li><li>
Develop or refine IR playbooks for priority incident types (phishing, malware, insider threat, cloud compromise, etc.).</li><li>
Lead SOC modernization initiatives including automation, orchestration, and analyst enablement.</li></ul>
4. Incident Response Uplift<ul><li>
Evaluate and enhance incident response strategies, containment approaches, escalation paths, and communication flows.</li><li>
Conduct tabletop exercises, technical simulations, and scenario-based training to improve analyst readiness.</li><li>
Improve coordination across IT, security, compliance, and risk teams during incident handling.</li><li>
Advise leadership on best practices, emerging threats, and enterprise IR preparedness.</li></ul>
5. Implementation Leadership &amp; Delivery<ul><li>
Drive the successful implementation of all improvements identified during the assessment phase.</li><li>
Manage cross-functional workstreams, ensuring timely delivery of SIEM/SOC enhancements.</li><li>
Ensure all changes align with cybersecurity best practices, compliance requirements, and business objectives.</li><li>
Track progress using KPIs such as MTTD, MTTR, correlation accuracy, false-positive rates, and detection coverage.</li></ul></div>

Cybersecurity consultant

Al Rostamani Group

<div>
 Every employee at Al Rostamani Group plays a role in making a real difference to the business and our customers. We care for our employees by offering them meaningful and purposeful work and an opportunity to grow, learn, contribute and succeed. Today, the Al Rostamani Group has come a long way since its birth in 1957. Our group has grown steadfastly with the guiding principles of Commitment, Care &amp; Vision, alongside a strong sense of active involvement in the community. We are a well-diversified group, with a key presence in industries such as General Trading, Automobiles and Heavy Equipment, Travel, Foreign Exchange, Financial Services, Property Management, Construction, Infrastructure Development and Information Technology Services. Our Group employs approximately 2000 people from 41 different nationalities, which contributes to our multicultural and multi-national environment.
 
 
 
 Job Purpose
 
 
 
 The Data Security Analyst is responsible for protecting the organisation&rsquo;s digital assets by ensuring that data handling and processing are secure and compliant with internal policies, applicable regulations, and industry best practices. This role is pivotal in identifying and mitigating security threats, enforcing adherence to security standards, and maintaining a robust cybersecurity infrastructure. The Analyst will work closely with the IT Security &amp; Governance Manager, the Group Information Technology and various departments to implement security controls, monitor network activity for potential threats, and respond to security incidents. Key responsibilities also include developing and refining security protocols, conducting regular assessments, and providing actionable recommendations to strengthen the organisation&rsquo;s overall security posture.
 
 
 The specialist will collaborate with cross-functional teams, provide insights to senior management, and foster a culture of security awareness throughout the organisation.
 
 
 
 
 Job Responsibilities
 
 
 
 
 
 Technical Responsibilities
 
 
 
 <ul>
 <li>
 Vulnerability Assessment and Penetration Testing: Conduct comprehensive VA/PT across IT infrastructure, including servers, web applications, APIs, and mobile applications.
 </li>
 <li>
 Security Incident Response: Investigate and respond to security incidents, including preparing incident reports and documentation.
 </li>
 <li>
 Security Configuration Management: Monitor and maintain security configurations in cloud platforms (AWS, Azure, Microsoft 365, Microsoft Fabric) and administer technical controls like firewalls, WAF, NAC, PAM, etc.
 </li>
 <li>
 Secure Coding Practices: Identify vulnerabilities in application code and provide technical guidance to development teams on secure coding practices.
 </li>
 <li>
 Data Protection Tools Management: Monitor and maintain data protection tools such as DLP, Data Classification, Privacy Management, SWG, SEG, EDR, MDM, and SOC dashboards.
 </li>
 <li>
 Technical Due Diligence: Conduct technical due diligence on new applications, assessing their architecture, performance, scalability, and compliance with security standards.
 </li>
 <li>
 Security Technology Research: Actively research, evaluate, and drive next-generation security technologies and solutions to meet organizational requirements.
 </li>
 <li>
 Network Traffic Analysis: Analyse network traffic, intrusion attempts, activity logs, and system alerts for trends, anomalies, and potential security breaches.
 </li>
 <li>
 Business Responsibilities
 </li>
 <li>
 Audit Coordination and Remediation: Support the coordination of internal and external audits, track security audit findings, and report remediation efforts.
 </li>
 <li>
 Governance Policy Management: Support the development, maintenance, and regular review of governance policies, procedures, and frameworks.
 </li>
 <li>
 Risk Assessment and Management: Conduct Data Protection Impact Assessments, implement robust data privacy controls, and identify, analyse, and mitigate data privacy risks and ensure compliance with regulatory requirements.
 </li>
 <li>
 Security Training and Awareness: Assist in developing and delivering security training programs and awareness campaigns for employees.
 </li>
 <li>
 Compliance Monitoring: Monitor adherence to IT and security governance frameworks and recommend improvements.
 </li>
 <li>
 Vendor Liaison: Liaise with vendors for POCs and demos of new IT security requirements.
 </li>
 <li>
 Security Requirements Analysis: Analyse business requirements and provide objective advice on IT security needs.
 </li>
 <li>
 Employee Support: Address employee concerns or questions on various aspects of security and compliance and gather feedback to improve systems.
 
 
 </li>
 </ul>
 
 
 Job Requirements
 
 
 
 
 <ul>
 <li>
 Bachelor's degree or higher in a relevant field.
 </li>
 <li>
 Security certifications such as Certified Ethical Hacker (CEH) or CompTIA Security+ are preferred.
 </li>
 <li>
 Proven experience (typically 3+ years) in information security.
 </li>
 <li>
 Strong knowledge of cloud security, cybersecurity frameworks, standards, and best practices.
 </li>
 <li>
 Strong understanding of data governance frameworks, regulatory requirements, and industry standards
 </li>
 <li>
 Excellent communication and interpersonal skills.
 </li>
 <li>
 Demonstrated ability to influence and collaborate with cross-functional teams.
 </li>
 <li>
 In-depth understanding of risk management, compliance, and governance principles
 
 
 </li>
 </ul>
 At Al Rostamani Group, we seek talented people who work hard to achieve great things. We consider not only your skills and experience, but also your passion for the role, your desire to learn and how well you align with our core values of care, commitment and vision. If this position represents an opportunity you wish to pursue, we invite you to apply.
</div>

Data Security Analyst

Al Rostamani International Exchange

<div>Every employee at Al Rostamani Group plays a role in making a real difference to the business and our customers. We care for our employees by offering them meaningful and purposeful work and an opportunity to grow, learn, contribute and succeed. Today, the Al Rostamani Group has come a long way since its birth in 1957. Our group has grown steadfastly with the guiding principles of Commitment, Care &amp; Vision, alongside a strong sense of active involvement in the community. We are a well-diversified group, with a key presence in industries such as General Trading, Automobiles and Heavy Equipment, Travel, Foreign Exchange, Financial Services, Property Management, Construction, Infrastructure Development and Information Technology Services. Our Group employs approximately 2000 people from 41 different nationalities, which contributes to our multicultural and multi-national environment.
<div><div><div><h2 class="jobSectionHeader">
Job Purpose</h2>
</div><div>
The Data Security Analyst is responsible for protecting the organisation&rsquo;s digital assets by ensuring that data handling and processing are secure and compliant with internal policies, applicable regulations, and industry best practices. This role is pivotal in identifying and mitigating security threats, enforcing adherence to security standards, and maintaining a robust cybersecurity infrastructure. The Analyst will work closely with the IT Security &amp; Governance Manager, the Group Information Technology and various departments to implement security controls, monitor network activity for potential threats, and respond to security incidents. Key responsibilities also include developing and refining security protocols, conducting regular assessments, and providing actionable recommendations to strengthen the organisation&rsquo;s overall security posture. 
The specialist will collaborate with cross-functional teams, provide insights to senior management, and foster a culture of security awareness throughout the organisation.
</div></div><div><div><h2 class="jobSectionHeader">
Job Responsibilities</h2>
</div><div>
Technical Responsibilities
<ul><li>Vulnerability Assessment and Penetration Testing: Conduct comprehensive VA/PT across IT infrastructure, including servers, web applications, APIs, and mobile applications.</li>
<li>Security Incident Response: Investigate and respond to security incidents, including preparing incident reports and documentation.</li>
<li>Security Configuration Management: Monitor and maintain security configurations in cloud platforms (AWS, Azure, Microsoft 365, Microsoft Fabric) and administer technical controls like firewalls, WAF, NAC, PAM, etc.</li>
<li>Secure Coding Practices: Identify vulnerabilities in application code and provide technical guidance to development teams on secure coding practices.</li>
<li>Data Protection Tools Management: Monitor and maintain data protection tools such as DLP, Data Classification, Privacy Management, SWG, SEG, EDR, MDM, and SOC dashboards.</li>
<li>Technical Due Diligence: Conduct technical due diligence on new applications, assessing their architecture, performance, scalability, and compliance with security standards.</li>
<li>Security Technology Research: Actively research, evaluate, and drive next-generation security technologies and solutions to meet organizational requirements.</li>
<li>Network Traffic Analysis: Analyse network traffic, intrusion attempts, activity logs, and system alerts for trends, anomalies, and potential security breaches.</li>
<li>Business Responsibilities</li>
<li>Audit Coordination and Remediation: Support the coordination of internal and external audits, track security audit findings, and report remediation efforts.</li>
<li>Governance Policy Management: Support the development, maintenance, and regular review of governance policies, procedures, and frameworks.</li>
<li>Risk Assessment and Management: Conduct Data Protection Impact Assessments, implement robust data privacy controls, and identify, analyse, and mitigate data privacy risks and ensure compliance with regulatory requirements.</li>
<li>Security Training and Awareness: Assist in developing and delivering security training programs and awareness campaigns for employees.</li>
<li>Compliance Monitoring: Monitor adherence to IT and security governance frameworks and recommend improvements.</li>
<li>Vendor Liaison: Liaise with vendors for POCs and demos of new IT security requirements.</li>
<li>Security Requirements Analysis: Analyse business requirements and provide objective advice on IT security needs.</li>
<li>Employee Support: Address employee concerns or questions on various aspects of security and compliance and gather feedback to improve systems.</li>
</ul></div></div><div><div><h2 class="jobSectionHeader">Job Requirements</h2>
</div><div><ul><li>Bachelor's degree or higher in a relevant field.</li>
<li>Security certifications such as Certified Ethical Hacker (CEH) or CompTIA Security+ are preferred.</li>
<li>Proven experience (typically 3+ years) in information security.</li>
<li>Strong knowledge of cloud security, cybersecurity frameworks, standards, and best practices.</li>
<li>Strong understanding of data governance frameworks, regulatory requirements, and industry standards</li>
<li>Excellent communication and interpersonal skills.</li>
<li>Demonstrated ability to influence and collaborate with cross-functional teams.</li>
<li>In-depth understanding of risk management, compliance, and governance principles</li>
</ul>
</div></div></div>At Al Rostamani Group, we seek talented people who work hard to achieve great things. We consider not only your skills and experience, but also your passion for the role, your desire to learn and how well you align with our core values of care, commitment and vision. If this position represents an opportunity you wish to pursue, we invite you to apply.</div>

Explore 1516+ Security consultant in Dubai this December. Find roles across top companies and apply now to boost your career.

1516 security consultant jobs IN Dubai

Information Security Consultant

Security Consultant - MEA

Network Security Pre-Sales Consultant

Application Security Engineer - Emiratisation

Cybersecurity consultant

Data Security Analyst

Data Security Analyst