data engineer

ai engineer, light

ai platform engineer

senior software engineer

senior system engineer

security engineer

Coca-Cola HBC

<div>
 
 
 Department:
 
 Cyber Security &amp; Data Privacy Platform
 
 
 
 Location:
 
 Egypt, Greece, Bulgaria
 
 
 
 
 
 We are seeking a skilled and motivated
 
 Endpoint Security Engineer
 
 with expertise in administering Email Antispam and EDR solutions to join our cybersecurity team. In this role, you will be responsible for designing, implementing, and managing our email security and endpoint protection solutions. Your knowledge of Proofpoint's antispam capabilities and Microsoft Defender's advanced endpoint protection features will be crucial in safeguarding our organization against email-borne threats and endpoint vulnerabilities. The position will be reported directly to the Product Manager responsible for Endpoint Security.
 
 
 
 
 
 
 YOUR NEW KEY RESPONSIBILITIES:
 
 
 
 &bull; Design, deploy, and manage our company antispam solution to ensure effective filtering of inbound and outbound emails, blocking spam, phishing attempts, and malicious attachments.
 
 
 &bull; Configure policies for content filtering, URL categorization, and email encryption.
 
 
 &bull; Day to day configuration support and administration.
 
 
 &bull; Implement and manage EDR to provide advanced protection against malware, ransomware, and other endpoint vulnerabilities.
 
 
 &bull; Utilize threat intelligence and behavior-based analytics to detect and respond to security threats across endpoints.
 
 
 &bull; Develop and enforce email security and endpoint protection policies aligned with industry best practices and organizational requirements.
 
 
 &bull; Configure detection rules, custom policies, and security baselines for endpoints.
 
 
 &bull; Optimize Antispam and EDR configurations for accurate threat detection and minimal false positives.
 
 
 &bull; Maintain relationships with Proofpoint and Microsoft representatives, staying updated about product updates, patches, and security enhancements.
 
 
 &bull; Employee Training and Awareness.
 
 
 &bull; Ability to work as on call: It will be required to participate to the team&rsquo;s on call shift one week per month.
 
 
 
 
 
 
 ARE THESE YOUR SECRET INGREDIENTS?
 
 
 
 &bull; Bachelor&rsquo;s degree in computer science, Information Security, or related field (or equivalent experience).
 
 
 &bull; 5 years of proven experience as an Engineer with expertise in Antispam and EDR solutions.
 
 
 &bull; Experience with Proofpoint or Microsoft Defender for Endpoint will be considered as a plus.
 
 
 &bull; Experience with Privileged access management systems or network security tools will be considered as a plus.
 
 
 &bull; Strong understanding of email security protocols, antispam mechanisms, and endpoint protection concepts.
 
 
 &bull; Experience with email threat analysis, malware detection, and endpoint vulnerability assessment.
 
 
 &bull; Familiarity with email authentication mechanisms (SPF, DKIM, DMARC) and endpoint detection and response (EDR) tools.
 
 
 &bull; Excellent problem-solving skills and the ability to respond to security incidents promptly.
 
 
 &bull; Strong communication skills to collaborate with technical and non-technical stakeholders.
 
 
 &bull; English proficiency is a MUST
 
 
 
 
 
 
 BENEFITS:
 
 
 
 &bull; Competitive compensation and comprehensive benefits package.
 
 
 &bull; Opportunity to work with cutting-edge email security and endpoint protection technologies.
 
 
 &bull; Collaborative and innovative work environment.
 
 
 &bull; Continuous learning and professional development opportunities.
 
 
 &bull; Contribution to enhancing the organization's email and endpoint security posture.
 
 
 
 
 
 
 ABOUT YOUR NEW TEAM:
 
 
 
 We are Coca-Cola Hellenic, a growth-focused consumer goods business and strategic bottling partner of the Coca-Cola Company. We bottle, distribute and sell an unrivalled range of products in 29 markets in Europe, Africa and Eurasia. As we do, we create value for all stakeholders, support socio-economic growth and build a more positive environmental impact.
 
 
 We bring together more than 30,000 people from over 70 nationalities, coming from five continents. The diversity of our markets, from mature to emerging economies, provides a wide range of attractive opportunities for growth.
 
 
 We nurture our talents. We give opportunities to people across all functions and levels, as well as different geographies, backgrounds and education. We are willing to take a risk on the people we believe in, even if they don&rsquo;t have the perfect experience. We have faith in what every person can be. And although we have so much to be proud of, we always stay humble. We believe the real magic happens &ndash; for us and for you &ndash; when we OPEN UP.
 
 
 
 
 
 
 AT COCA-COLA HBC, DIVERSITY HELPS US THRIVE
 
 
 
 At Coca-Cola HBC, we are an inclusive employer that thrives on diversity. This means our environment provides equal opportunities for all, regardless of race, color, religion, age, disability, sexual orientation, or gender identity. Join us in nurturing a culture where everyone belongs and contributes to our collective success.
 
</div>

Endpoint Security Engineer

Watan First Digital - Egypt

<div>
 
 
 Job Summary
 
 
 
 We are seeking a highly skilled Senior Cloud Security Engineer to design, implement, and manage the security architecture of our digital ecosystem. The primary objective is to protect the company's cloud-native applications and infrastructure from evolving cyber threats&mdash;such as Ransomware and unauthorized data exfiltration&mdash;while ensuring 100% business continuity through robust infrastructure hardening and immutable recovery strategies.
 
 
 
 
 
 
 Key Responsibilities
 
 
 <ul>
 <li>
 Infrastructure Hardening &amp; Networking: Secure Virtual Machines (VMs) and Virtual Networks (VNETs) by enforcing strict Network Security Groups (NSGs). Eliminate public-facing vulnerabilities by replacing standard RDP (3389) access with secure solutions like Azure Bastion and VPN Gateways.
 </li>
 <li>
 Identity &amp; Access Management (IAM): Implement the "Principle of Least Privilege" across the Azure environment. Enforce Multi-Factor Authentication (MFA) and manage Privileged Identity Management (PIM) for all administrative access.
 </li>
 <li>
 Advanced Data Protection: Ensure all sensitive data is encrypted at rest and in transit. Manage secrets, certificates, and cryptographic keys using Azure Key Vault.
 </li>
 <li>
 Backup &amp; Disaster Recovery (BDR): Architect and maintain an Immutable Backup strategy. Ensure that recovery points are isolated and protected from the production environment to guarantee restoration even in the event of a total system compromise.
 </li>
 <li>
 Threat Detection &amp; Monitoring: Deploy and manage Microsoft Defender for Cloud and Microsoft Sentinel (SIEM/SOAR) to detect, investigate, and respond to security alerts in real-time.
 </li>
 <li>
 Vulnerability Management: Conduct regular automated and manual vulnerability assessments on servers and databases (SQL, NoSQL). Oversee the immediate patching of critical security flaws.
 </li>
 <li>
 Incident Response: Lead the security incident response lifecycle. Create and test playbooks for rapid containment, eradication, and recovery during a security breach.
 </li>
 </ul>
 
 
 
 
 
 Technical Requirements
 
 
 <ul>
 <li>
 Experience: Minimum of 5+ years in Cybersecurity, with at least 3 years of hands-on experience exclusively in Microsoft Azure.
 </li>
 <li>
 Network Security: Deep expertise in Azure Firewalls, Application Gateways, WAF (Web Application Firewall), and Private Links.
 </li>
 <li>
 System Administration: Strong knowledge of Windows Server and Linux hardening techniques.
 </li>
 <li>
 Automation: Proficiency in scripting (PowerShell, Azure CLI) and Infrastructure as Code (Terraform or Bicep) to automate security compliance.
 </li>
 <li>
 DevSecOps: Experience integrating security checks into CI/CD pipelines (Azure DevOps / GitHub Actions).
 </li>
 <li>
 Database Security: Proven experience securing cloud-based databases and managing data integrity.
 </li>
 </ul>
 
 
 
 
 
 Preferred Qualifications &amp; Certifications
 
 
 <ul>
 <li>
 AZ-500: Microsoft Azure Security Technologies (Highly Preferred).
 </li>
 <li>
 SC-200: Microsoft Security Operations Analyst.
 </li>
 <li>
 CISSP or CISM certification.
 </li>
 <li>
 Experience in high-security environments or research-driven technology sectors
 </li>
 </ul>
</div>

Senior Cloud Security Engineer

Axis

<div>
 
 About Axis
 
 
 
 We believe that financial services should be more accessible, simple and fun. That&rsquo;s why we started Axis - an app that empowers consumers, solopreneurs, and small businesses with the digital financial tools they need to reach their potential.
 
 
 Join us if you want to be part of a team that obsesses day in and day out about building financial products that will have a real impact on the lives of millions of people.
 
 
 
 Overview Of The Role
 
 
 
 We are looking to hire a cyber security engineer with hands on experience in
 
 penetration testing
 
 techniques, and an analytical mind set and a detailed understanding of cybersecurity methodologies.
 
 
 Cyber security engineers are expected to have meticulous attention to detail, outstanding problem-solving skills, work comfortably under pressure, and deliver on tight deadlines.
 
 
 
 What You&rsquo;ll Be Doing
 
 
 
 <ul>
 <li>
 Responsible for application (Web &amp; Mobile) &amp; infrastructure penetration testing.
 </li>
 <li>
 Planning, implementing, managing, monitoring, and upgrading security measures for the protection of the organization's data, systems, and networks.
 </li>
 <li>
 Manage the development of cyber security programs in different domains including the development of strategy, architecture, identity and access management and cyber security solutions based on leading practices such as PCI, NIST, CIS, ISO27 and others.
 </li>
 <li>
 Participate extensively in the design of end-to-end security operations center with the required facility, processes, technologies and people.
 </li>
 <li>
 Ensuring that the organization's data and infrastructure are protected by enabling the appropriate security controls.
 </li>
 <li>
 Conduct research on emerging cyber security technologies and disseminate knowledge to Technology consultants where required.
 </li>
 <li>
 Testing and identifying network and system vulnerabilities.
 </li>
 <li>
 Daily administrative tasks, reporting, and communication with the relevant departments in the organization.
 
 
 </li>
 </ul>
 
 Requirements
 
 
 
 <ul>
 <li>
 A degree in computer science, IT, systems engineering, or related qualification.
 </li>
 <li>
 0-2 years of experience in cyber security including development of cyber security strategies, end to end cyber security transformation programs, security architecture and extensive knowledge of latest cyber security technologies and standards.
 </li>
 <li>
 Strong understanding &amp; hands-on experience in penetration testing techniques.
 </li>
 <li>
 Strong understanding and preferably application of security controls global standards (PCI &amp; ISO 27001).
 </li>
 <li>
 Hands on with scripting languages (e.g.: Python, Java, Power Shell&hellip;)
 </li>
 <li>
 Ability to work under pressure in a fast-paced environment.
 </li>
 <li>
 Strong attention to detail with an analytical mind and outstanding problem-solving skills.
 </li>
 <li>
 Great awareness of cybersecurity trends and threats.
 </li>
 <li>
 Ability to learn new concepts and carry out technical research.
 </li>
 <li>
 Proven IT skills in Microsoft Office and G-suite applications.
 
 
 </li>
 </ul>
 
 Perks of working @ Axis
 
 
 
 <ul>
 <li>
 Hybrid working conditions.
 </li>
 <li>
 Medical Insurance for You and your family.
 </li>
 <li>
 Life Insurance.
 </li>
 <li>
 Gym subscription.
 </li>
 <li>
 Very competitive leave policy including extended Maternity and Paternity leaves.
 </li>
 </ul>
</div>

Cyber Security Engineer (Penetration)

Agoda

<div>
 
 About Agoda
 
 
 
 At Agoda, we bridge the world through travel. Our story began in 2005, when two lifelong friends and entrepreneurs, driven by their passion for travel, launched Agoda to make it easier for everyone to explore the world.
 
 
 Today, we are part of Booking Holdings [NASDAQ: BKNG], with a diverse team of over 7,000 people from 90 countries, working together in offices around the globe. Every day, we connect people to destinations and experiences, with our great deals across our millions of hotels and holiday properties, flights, and experiences worldwide.
 
 
 No two days are the same at Agoda. Data and technology are at the heart of our culture, fueling our curiosity and innovation. If you&rsquo;re ready to begin your best journey and help build travel for the world, join us.
 
 
 We are looking for a hands on Senior Security Engineer to secure our cloud and platform environments. This role works closely with engineering teams and focuses on building, reviewing, and operating security controls using Infrastructure as Code, Kubernetes, and custom security services written in Go and TypeScript.
 
 
 
 Key Responsibilities:
 
 
 
 Secure Cloud Deployment:
 
 
 <ul>
 <li>
 Design, implement, and manage secure cloud deployments across AWS and GCP environments using Terraform.
 </li>
 <li>
 Kubernetes &amp; GitOps Security: Deploy and manage both internal and third‑party security products within the Kubernetes ecosystem.
 </li>
 <li>
 Work with GitOps workflows using tools like Argo CD and Flux, and Helm charts.
 </li>
 <li>
 Security Automation &amp; Tooling: Design and build security tooling and services using Go and TypeScript.
 </li>
 <li>
 Misconfiguration Management: Proactively identify, analyze, and remediate cloud misconfigurations.
 </li>
 <li>
 Cloud Architecture Guidance: Provide guidance to Engineering teams on secure architecture.
 </li>
 <li>
 Threat Detection &amp; Response: Build and optimize cloud-native detection rules and alerting pipelines to monitor for suspicious activities within the cloud and container workloads.
 
 
 </li>
 </ul>
 
 Required Skills &amp; Experience:
 
 
 
 <ul>
 <li>
 8+ years of experience in security engineering, cloud security, or platform engineering roles.
 </li>
 <li>
 Hands-on experience securing production workloads in AWS and GCP.
 </li>
 <li>
 Strong experience designing and securing Infrastructure as Code using Terraform.
 </li>
 <li>
 Deep understanding of Kubernetes security, including troubleshooting Helm deployments and GitOps-based workflows.
 </li>
 <li>
 Strong programming skills in Go and TypeScript, with Python used for automation where appropriate.
 </li>
 <li>
 Experience embedding security controls into CI/CD pipelines.
 </li>
 <li>
 Certifications (Required) Certified Kubernetes Administrator (CKA) Certified Kubernetes Security Specialist (CKS) Certifications (Preferred) AWS Certified Security
 </li>
 <li>
 Specialty Google Professional Cloud Security Engineer HashiCorp Certified: Terraform Associate
 </li>
 <li>
 Nice-to-Have Experience with Policy-as-Code frameworks such as Open Policy Agent (OPA).
 </li>
 <li>
 Experience securing service mesh environments (Istio). Background in software engineering or platform engineering before moving into security.
 
 
 </li>
 </ul>
 #sanfrancisco #sanjose #losangeles #sandiego #oakland #denver #miami #orlando #atlanta #chicago #boston #detroit #newyork #portland #philadelphia #dallas #houston #austin #seattle #sydney #melbourne #perth #toronto #vancouver #montreal #shanghai #beijing #shenzhen #prague #Brno #Ostrava #cairo #alexandria #giza #estonia #paris #berlin #munich #hamburg #stuttgart #cologne #frankfurt #hongkong #budapest #jakarta #bali #dublin #telaviv #milan #rome #venice #florence #naples #turin #palermo #bologna #tokyo #osaka #kualalumpur #malta #amsterdam #oslo #manila #warsaw #krakow #doha #alrayyan #riyadh #jeddah #mecca #medina #singapore #seoul #barcelona #madrid #stockholm #zurich #taipei #tainan #taichung #kaohsiung #bangkok #Phuket #istanbul #london #manchester #edinburgh #hcmc #hanoi #lodz #wroclaw #poznan #katowice #rio #salvador #newdelhi #bangalore #bandung #yokohama #nagoya #okinawa #fukuoka #jerusalem #IT #4
 
 
 Please review our Hiring Process Guidelines before your interview &mdash; click here to learn how interviewing at Agoda works.
 
 
 
 Discover More About Working At Agoda
 
 
 
 <ul>
 <li>
 Agoda Careers https://careersatagoda.com
 </li>
 <li>
 Facebook https://www.facebook.com/agodacareers/
 </li>
 <li>
 LinkedIn https://www.linkedin.com/company/agoda
 </li>
 <li>
 YouTube https://www.youtube.com/agodalife
 
 
 </li>
 </ul>
 
 Equal Opportunity Employer
 
 
 
 At Agoda, we pride ourselves on being a company represented by people of all different backgrounds and orientations. We prioritize attracting diverse talent and cultivating an inclusive environment that encourages collaboration and innovation. Employment at Agoda is based solely on a person&rsquo;s merit and qualifications. We are committed to providing equal employment opportunity regardless of sex, age, race, color, national origin, religion, marital status, pregnancy, sexual orientation, gender identity, disability, citizenship, veteran or military status, and other legally protected characteristics.
 
 
 We will keep your application on file so that we can consider you for future vacancies and you can always ask to have your details removed from the file. For more details please read our privacy policy.
 
 
 
 Disclaimer
 
 
 
 We do not accept any terms or conditions, nor do we recognize any agency&rsquo;s representation of a candidate, from unsolicited third-party or agency submissions. If we receive unsolicited or speculative CVs, we reserve the right to contact and hire the candidate directly without any obligation to pay a recruitment fee.
 
 
</div>

Security Engineer (Bangkok Based, Relocation Support)

<div>
 
 About Agoda
 
 
 
 At Agoda, we bridge the world through travel. Our story began in 2005, when two lifelong friends and entrepreneurs, driven by their passion for travel, launched Agoda to make it easier for everyone to explore the world.
 
 
 Today, we are part of Booking Holdings [NASDAQ: BKNG], with a diverse team of over 7,000 people from 90 countries, working together in offices around the globe. Every day, we connect people to destinations and experiences, with our great deals across our millions of hotels and holiday properties, flights, and experiences worldwide.
 
 
 No two days are the same at Agoda. Data and technology are at the heart of our culture, fueling our curiosity and innovation. If you&rsquo;re ready to begin your best journey and help build travel for the world, join us.
 
 
 
 Role Overview:
 
 
 
 We are looking for a hands on Identity Security Engineer to design, build, and operate Okta platform. This role owns the implementation and evolution of Okta Identity Governance, lifecycle automation, and identity centric security controls across the enterprise.
 
 
 
 Key Responsibilities:
 
 
 
 <ul>
 <li>
 Okta Identity Governance (OIG) &amp; Lifecycle: Design and deploy Okta Identity Governance modules, including Access Requests, Certifications, and Entitlement Management.
 </li>
 <li>
 Develop and maintain custom workflows and policies within Okta IGA to enforce Segregation of Duties (SOD) rules during provisioning and access requests
 </li>
 <li>
 Design access certification campaigns and remediation workflows to satisfy audit requirements.
 </li>
 <li>
 Okta Platform Engineering: Manage Okta organization architecture (Groups, Rules, Policies) using Infrastructure-as-Code (Terraform) to ensure version control and reduce drift.
 </li>
 <li>
 Build and maintain Okta Workflows for lifecycle automation, custom notifications, and advanced logic beyond native features. Implement and enforce Multi-Factor Authentication (MFA) policies, Risk-Based Authentication, and Global Session Policies.
 </li>
 <li>
 Automation &amp; Integration: Develop automation using Okta APIs, Event Hooks, and Workflows. Integrate Okta OIG with downstream applications for seamless provisioning.
 </li>
 <li>
 Partner with Detection Engineering to ingest Okta System Logs into the SIEM for threat monitoring.
 </li>
 <li>
 Governance, Risk &amp; Compliance: Partner with GRC and Audit teams to support SOX, NIST requirements.
 </li>
 <li>
 Ensure identity controls are measurable, auditable, and enforced consistently.
 
 
 </li>
 </ul>
 
 Required Skills &amp; Experience:
 
 
 
 <ul>
 <li>
 6+ years of hands-on experience operating Okta in a production environment.
 </li>
 <li>
 Experience with Okta Identity Governance (OIG): Setting up Access Requests, Review Campaigns, and Entitlements.
 </li>
 <li>
 Experience with Terraform (specifically the Okta Provider) for managing configuration as code.
 </li>
 <li>
 Ability to write scripts in Python or JavaScript/TypeScript for custom API integrations.
 
 
 </li>
 </ul>
 #sanfrancisco #sanjose #losangeles #sandiego #oakland #denver #miami #orlando #atlanta #chicago #boston #detroit #newyork #portland #philadelphia #dallas #houston #austin #seattle #sydney #melbourne #perth #toronto #vancouver #montreal #shanghai #beijing #shenzhen #prague #Brno #Ostrava #cairo #alexandria #giza #estonia #paris #berlin #munich #hamburg #stuttgart #cologne #frankfurt #hongkong #budapest #jakarta #bali #dublin #telaviv #milan #rome #venice #florence #naples #turin #palermo #bologna #tokyo #osaka #kualalumpur #malta #amsterdam #oslo #manila #warsaw #krakow #doha #alrayyan #riyadh #jeddah #mecca #medina #singapore #seoul #barcelona #madrid #stockholm #zurich #taipei #tainan #taichung #kaohsiung #bangkok #Phuket #istanbul #london #manchester #edinburgh #hcmc #hanoi #lodz #wroclaw #poznan #katowice #rio #salvador #newdelhi #bangalore #bandung #yokohama #nagoya #okinawa #fukuoka #jerusalem #IT #4
 
 
 Please review our Hiring Process Guidelines before your interview &mdash; click here to learn how interviewing at Agoda works.
 
 
 
 Discover More About Working At Agoda
 
 
 
 <ul>
 <li>
 Agoda Careers https://careersatagoda.com
 </li>
 <li>
 Facebook https://www.facebook.com/agodacareers/
 </li>
 <li>
 LinkedIn https://www.linkedin.com/company/agoda
 </li>
 <li>
 YouTube https://www.youtube.com/agodalife
 
 
 </li>
 </ul>
 
 Equal Opportunity Employer
 
 
 
 At Agoda, we pride ourselves on being a company represented by people of all different backgrounds and orientations. We prioritize attracting diverse talent and cultivating an inclusive environment that encourages collaboration and innovation. Employment at Agoda is based solely on a person&rsquo;s merit and qualifications. We are committed to providing equal employment opportunity regardless of sex, age, race, color, national origin, religion, marital status, pregnancy, sexual orientation, gender identity, disability, citizenship, veteran or military status, and other legally protected characteristics.
 
 
 We will keep your application on file so that we can consider you for future vacancies and you can always ask to have your details removed from the file. For more details please read our privacy policy.
 
 
 
 Disclaimer
 
 
 
 We do not accept any terms or conditions, nor do we recognize any agency&rsquo;s representation of a candidate, from unsolicited third-party or agency submissions. If we receive unsolicited or speculative CVs, we reserve the right to contact and hire the candidate directly without any obligation to pay a recruitment fee.
 
 
</div>

Identity Security Engineer (Okta & Identity Governance) - Bangkok Based, Relocation provided

Magnet

<div>
 
 
 Employer Overview
 
 
 
 A national-scale private cloud platform provides secure, integrated IT services across multiple subsidiaries. The platform delivers
 
 multi-tenant, high-availability environments
 
 with advanced network and application security, supporting compliance, Zero Trust access, and secure workload hosting across hybrid infrastructures.
 
 
 
 
 
 
 Job Summary
 
 
 
 The Security Infrastructure Engineer is responsible for designing, implementing, and operating the security infrastructure of the private cloud platform. The role ensures
 
 secure network and application access, tenant-level segmentation, and Zero Trust principles
 
 , while maintaining high availability and compliance across multi-site environments.
 
 
 
 
 
 
 Key Responsibilities
 
 
 <ul>
 <li>
 Design and operate Fortinet security platforms (NGFW, WAF, ADC, NAC, FortiAuthenticator, Sandbox)
 </li>
 <li>
 Implement and manage tenant-level security segmentation and firewall policies
 </li>
 <li>
 Integrate Zero Trust access solutions (e.g., AppGate or equivalent)
 </li>
 <li>
 Manage north-south and east-west traffic inspection and security policies
 </li>
 <li>
 Support secure application publishing and WAF protection
 </li>
 <li>
 Collaborate with SOC teams for incident response and threat mitigation
 </li>
 <li>
 Ensure compliance with security policies and regulatory requirements
 </li>
 <li>
 Support disaster recovery and high availability for security infrastructure
 </li>
 <li>
 Optimize security performance and scalability across multi-tenant environments
 </li>
 </ul>
 
 
 
 
 
 Requirements
 
 
 <ul>
 <li>
 Bachelor&rsquo;s degree in Cybersecurity, Networks, Computer Engineering, or related field (preferred)
 </li>
 <li>
 6&ndash;10 years in network and infrastructure security
 </li>
 <li>
 Hands-on experience with enterprise security platforms in large-scale environments
 </li>
 <li>
 Proven experience with TCP/IP, routing, and network security principles
 </li>
 <li>
 Familiarity with SIEM integration and incident response coordination
 </li>
 <li>
 Strong analytical and problem-solving abilities
 </li>
 <li>
 Excellent communication and collaboration skills
 </li>
 <li>
 Detail-oriented with proactive security mindset
 </li>
 <li>
 Ability to work independently and in cross-functional teams
 </li>
 <li>
 Fortinet ecosystem: FortiGate, FortiWeb, FortiADC, FortiNAC, FortiAuthenticator, FortiSandbox
 </li>
 <li>
 Firewall policy design and tenant-level network segmentation
 </li>
 <li>
 Zero Trust architecture and secure remote access
 </li>
 <li>
 DDoS protection and traffic filtering
 </li>
 <li>
 Application security and WAF management
 </li>
 <li>
 Integration with SIEM and SOC platforms
 </li>
 <li>
 Proficiency with security management, monitoring, and orchestration tools
 </li>
 <li>
 Familiarity with hybrid and multi-site cloud environments
 </li>
 <li>
 Fluency in English (written and spoken)
 </li>
 <li>
 Ability to maintain 24x7 security infrastructure availability
 </li>
 <li>
 Capacity to implement secure access and segmentation across multi-tenant environments
 </li>
 <li>
 Capability to support DR and high-availability operations
 </li>
 <li>
 Ability to optimize security performance and enforce compliance policies
 </li>
 <li>
 Fortinet NSE4 / NSE7 / NSE8
 </li>
 <li>
 CISSP or equivalent security certification
 </li>
 <li>
 CCNP Security or equivalent
 </li>
 </ul>
</div>

Security Infrastructure Engineer (Fortinet & Zero Trust)

Deloitte

<div>
 
 Connect to your career at Deloitte
 
 
 
 
 Deloitte
 
 , established globally in 1845, is the world&rsquo;s largest and leading professional services firm, providing Audit &amp; Assurance, Tax &amp; Legal and Consulting and related services to public and private clients spanning multiple industries. Present in more than 150 countries, Deloitte is distinct in its ability to help clients solve their most complex problems, from strategy to implementation.
 
 
 Deloitte innovation hub (DIH) is a strategic initiative established by Deloitte North &amp; South Europe (NSE) to support our ambition to become the leading business transformation partner of choice for our clients and to expand and scale our delivery footprint across EMEA. With access to a scaled, diverse, highly skilled, motivated, and engaged workforce, DIH is delivering complex technical solutions for clients&rsquo; most complex business problems, across portfolios that include &lsquo;Strategy &amp; Transactions&rsquo;, &lsquo;Customer&rsquo;, &lsquo;Engineering, AI &amp; Data, &lsquo;Enterprise, Technology &amp; Performance&rsquo; and &lsquo;Cyber&rsquo;. DIH is aiming to become the destination for top talents in Egypt for a long, exciting career.
 
 
 We invest in outstanding people of diverse talents and backgrounds and empower them to achieve more than they could elsewhere. Our work combines advice with action and integrity. We believe that when our clients and society are stronger, so are we. Our organization has grown in scale and diversity, providing services across the region, with our shared culture remaining the same. We aim to help clients realize their ambitions, make a positive difference in society, and maximize the success of our people. This drive fuels the commitment and humanity that run deep through our every action.
 
 
 
 Connect to your opportunity.
 
 
 
 At Deloitte, you will make a real impact by working on diverse projects and collaborating with experts to deliver innovative solutions. As an
 
 Offensive Security Senior Engineer
 
 , you will focus on adversary emulation and red teaming to simulate advanced persistent threats (APTs) and cyberattacks. Using frameworks like MITRE ATT&amp;CK, you will test the resilience of our security controls and incident response capabilities. Additionally, you will conduct penetration testing on web applications, mobile apps, APIs, and networks, using scripting, defense evasion techniques, and code review to identify and exploit vulnerabilities.
 
 
 
 Your Role Might Include All The Following
 
 
 
 
 Red Teaming and Penetration Testing
 
 
 
 <ul>
 <li>
 Lead red team engagements to emulate the TTPs of advanced adversaries, using frameworks like MITRE ATT&amp;CK and Caldera to simulate real-world attack scenarios.
 </li>
 <li>
 Design and execute complex attack chains, including initial access, privilege escalation, lateral movement, data exfiltration, and persistence, to test the effectiveness of security controls.
 </li>
 <li>
 Simulate sophisticated threats such as nation-state actors, ransomware groups, and insider threats to identify gaps in detection and response processes.
 </li>
 <li>
 Conduct penetration testing across web applications, networks, cloud environments, and internal systems to identify vulnerabilities and validate red team findings.
 </li>
 <li>
 Test for vulnerabilities in web applications (e.g., SQL injection, XSS, CSRF, IDOR, OWASP Top 10), mobile apps (iOS and Android), and APIs (REST, GraphQL, SOAP).
 </li>
 <li>
 Use tools like Burp Suite, OWASP ZAP, Frida, and MobSF to identify and exploit vulnerabilities in diverse attack surfaces.
 
 
 </li>
 </ul>
 
 Web Application Security
 
 
 
 <ul>
 <li>
 Conduct in-depth penetration testing of web applications to identify vulnerabilities such as SQL injection, cross-site scripting (XSS), cross-site request forgery (CSRF), insecure direct object references (IDOR), and other OWASP Top 10 issues.
 </li>
 <li>
 Test for business logic flaws, session management issues, and authentication/authorization vulnerabilities in web applications.
 </li>
 <li>
 Use tools like Burp Suite, OWASP ZAP, and manual techniques to identify and exploit web application vulnerabilities.
 
 
 </li>
 </ul>
 
 Scripting and Automation
 
 
 
 <ul>
 <li>
 Write and maintain custom scripts (e.g., in Python, PowerShell, Bash, or JavaScript) to automate attack techniques, payloads, and reconnaissance processes for web, mobile, and API testing.
 </li>
 <li>
 Build tools to streamline pentesting workflows, such as automated vulnerability scanning, exploitation, and post-exploitation activities.
 </li>
 <li>
 Create scripts to bypass web application firewalls (WAFs), evade detection, and test the resilience of blue team defenses.
 
 
 </li>
 </ul>
 
 Defense Evasion Techniques
 
 
 
 <ul>
 <li>
 Research and implement advanced defense evasion techniques to bypass endpoint detection and response (EDR), antivirus, WAFs, and other security solutions.
 </li>
 <li>
 Develop obfuscation methods for payloads and exploits to avoid detection by SIEM, IDS/IPS, and other monitoring tools.
 </li>
 <li>
 Stay updated on the latest evasion techniques and adapt strategies to simulate sophisticated adversaries targeting web applications and other systems.
 
 
 </li>
 </ul>
 
 Code Review &amp; Secure Development
 
 
 
 <ul>
 <li>
 Perform thorough code reviews to identify vulnerabilities in web applications, APIs, and mobile apps, focusing on languages such as Java, JavaScript, Python, PHP, or C#.
 </li>
 <li>
 Identify insecure coding practices, such as improper input validation, lack of output encoding, and insecure API integrations.
 </li>
 <li>
 Collaborate with development teams to provide actionable recommendations for secure coding practices and remediation of identified vulnerabilities.
 
 
 </li>
 </ul>
 
 Mobile and API Security
 
 
 
 <ul>
 <li>
 Perform penetration testing on mobile applications (iOS and Android) to identify vulnerabilities such as insecure storage, improper session handling, and weak authentication mechanisms.
 </li>
 <li>
 Assess API security (REST, GraphQL, SOAP) for issues like broken authentication, excessive data exposure, and lack of rate limiting.
 </li>
 <li>
 Use tools like Burp Suite, Frida, and MobSF to analyze mobile and API attack surfaces and develop exploits for identified vulnerabilities.
 
 
 </li>
 </ul>
 
 Connect To Your Skills And Professional Experience
 
 
 
 <ul>
 <li>
 Bachelor&rsquo;s degree in Cybersecurity, information technology, computer science, or a relevant degree.
 </li>
 <li>
 Minimum 3 to 7 years of hands-on experience in penetration testing, red teaming, or related offensive security roles.
 </li>
 <li>
 Analytical capabilities, critical thinking, and problem-solving mindset (ability to analyze complex data and information to identify key insights and trends).
 </li>
 <li>
 Proficient in English speaking and writing.
 </li>
 <li>
 Flexibility for travel and working hours.
 </li>
 <li>
 strong proficiency in web application pentesting tools such as Burp Suite, OWASP ZAP, and manual testing techniques.
 </li>
 <li>
 Proficiency in scripting languages such as Python, PowerShell, Bash, or JavaScript for automation and tool development.
 </li>
 <li>
 Deep understanding of defense evasion techniques, including bypassing WAFs, EDR, and AV solutions.
 </li>
 <li>
 Expertise in code review for identifying vulnerabilities in web applications, APIs, and mobile apps.
 </li>
 <li>
 Strong knowledge of mobile security testing tools (e.g., Frida, MobSF, Drozer) and API testing tools (e.g., Postman, Burp Suite).
 </li>
 <li>
 Familiarity with common pentesting tools like Metasploit, Nmap, Cobalt Strike, BloodHound, and Kali Linux.
 </li>
 <li>
 Understanding of cloud environments (AWS, Azure, GCP) and their associated attack vectors.
 
 
 </li>
 </ul>
 
 The Following Attributes Are Also Preferable
 
 
 
 <ul>
 <li>
 Relevant certifications such as OSCP, OSWE, OSEP, CRTO, CRTP, GWAPT, GXPN, or equivalent are a plus.
 </li>
 <li>
 Active participation in CTF competitions with demonstrated achievements.
 </li>
 <li>
 Experience with penetration testing of AI systems and Large Language Models (LLMs), including testing for vulnerabilities like prompt injection, data poisoning, model inversion, or adversarial attacks.
 </li>
 <li>
 Experience with adversary emulation frameworks like MITRE ATT&amp;CK or Caldera.
 </li>
 <li>
 Knowledge of secure software development lifecycle (SDLC) and DevSecOps practices.
 </li>
 <li>
 Contributions to the security community through blogs, tools, or conference talks.
 </li>
 <li>
 Familiarity with container security (Docker, Kubernetes) and serverless architectures.
 
 
 </li>
 </ul>
 
 Personal Independence
 
 
 
 Regulation and controls are standard practice in our industry and Deloitte is no exception. These controls provide important legal protection for both you and the firm. We are subject to several audit regulations, one of which requires that certain colleagues abide by specific personal independence constraints. This can mean that you and your "Immediate Family Members" are not permitted to hold certain financial interests (shares, funds, bonds etc.) with audit clients of the firm. The recruitment team will provide further detail as you progress through the recruitment process.
 
 
 
 Connect with your colleagues
 
 
 
 Location: Cairo, Egypt
 
 
 &ldquo;What attracted me to Deloitte were the endless opportunities and the collective experience of other like-minded individuals. Deloitte&rsquo;s clients include many of the world&rsquo;s largest organizations; I wanted to be part of a team that made a difference that I could be proud of.&rdquo; -Dan, Technology &amp; Transformation
 
 
 &ldquo;Everyone always says, &ldquo;it&rsquo;s the people,&rdquo; and that&rsquo;s true. Working for a brand you feel proud of feels pretty good too. And you don&rsquo;t have any stress about fitting into a particular stereotype, because there are so many different types of people in Deloitte Digital.&rdquo; &ndash; Gillian, Technology &amp; Transformation
 
 
 
 Our commitment to you
 
 
 
 Making an impact is more than just what we do: it&rsquo;s why we&rsquo;re here. So, we work hard to create an environment where you can experience a purpose you believe in, the freedom to be you, and the capacity to go further than ever before.
 
 
 We want you. The true you. Your own strengths, perspective, and personality. So, we&rsquo;re nurturing a culture where everyone belongs, feels supported and heard, and is empowered to make a valuable, personal contribution. You can be sure we&rsquo;ll take your wellbeing seriously, too. Because it&rsquo;s only when you&rsquo;re comfortable and at your best that you can make the kind of impact you, and we, live for.
 
 
 Your expertise is our capability, so we&rsquo;ll make sure it never stops growing. Whether it&rsquo;s from the complex work you do, or the people you collaborate with, you&rsquo;ll learn every day. Through world-class development, you&rsquo;ll gain invaluable technical and personal skills. Whatever your level, you&rsquo;ll learn how to lead.
 
 
 
 Connect to your next step
 
 
 
 A career at Deloitte is an opportunity to develop in any direction you choose. Join us and you&rsquo;ll experience a purpose you can believe in and an impact you can see. You&rsquo;ll be free to bring your true self to work every day. And you&rsquo;ll never stop growing, whatever your level.
 
 
</div>

Deloitte Innovation Hub | Cyber Security | Offensive Security Senior Engineer, Cairo, Egypt.

Explore 237+ Security engineer in Cairo this April. Find roles across top companies and apply now to boost your career.