security operations engineer

NorthBay - Pakistan

<div>
 Job Title: SDLC Security Operations Engineer (DevSecOps)
 
 
 Experience: 7&ndash;9 Years
 
 
 Location: Pakistan - Remote (UAE Business Hours)
 
 
 Employment Type: Full-Time
 
 
 
 Job Summary
 
 
 
 We are looking for a hands-on SDLC Security Operations Engineer to embed security controls into CI/CD pipelines and engineering workflows for a larger enterprise customer in the UAE. This role focuses on operationalizing DevSecOps integrating scanning tools, enforcing pipeline guardrails, reducing security debt, and ensuring SDLC controls align with ISO 27001, SOC 2, PIC/DSS etc.
 
 
 Key Responsibilities
 
 
 <ul>
 <li>
 Integrate and operate security controls across CI/CD pipelines using GitHub, GitLab, Azure DevOps, and Jenkins
 </li>
 <li>
 Implement and manage SAST/DAST, dependency scanning, secret scanning, and pipeline security gates (build-time enforcement)
 </li>
 <li>
 Establish secure build and release practices: artifact integrity, signing/verification, and controlled promotions across environments
 </li>
 <li>
 Implement secure secrets management practices and prevent credential leakage in repos and pipelines
 </li>
 <li>
 Drive remediation workflows with developers: triage findings, validate fixes, reduce false positives, and improve rule tuning
 </li>
 <li>
 Embed security checks for infrastructure-as-code and configuration where applicable; ensure consistent secure-by-default patterns
 </li>
 <li>
 Support secure SDLC documentation, control mapping, and audit evidence for ISO 27001, SOC 2, etc. (policies, logs, approvals, attestations)
 </li>
 <li>
 Contribute to developer enablement via secure coding guidance, playbooks, and integration patterns that reduce friction
 
 
 </li>
 </ul>
 
 Required Skills &amp; Qualifications
 
 
 
 <ul>
 <li>
 7&ndash;9 years of experience in DevSecOps / Application Security Engineering / SDLC Security Operations
 </li>
 <li>
 Strong hands-on experience with CI/CD tools: GitHub, GitLab, Azure DevOps, Jenkins
 </li>
 <li>
 Hands-on experience operating AppSec tooling: SAST/DAST and software supply chain controls (dependency risk management)
 </li>
 <li>
 Strong understanding of secure SDLC concepts (threat modeling basics, security testing, release governance)
 </li>
 <li>
 Ability to collaborate deeply with engineering teams and translate findings into actionable fixes
 </li>
 <li>
 Familiarity with Linux-based build environments and common developer workflows
 
 
 </li>
 </ul>
 
 Preferred Certifications
 
 
 
 <ul>
 <li>
 CSSLP or equivalent application security certifications
 </li>
 <li>
 CISSP or CISM
 
 
 </li>
 </ul>
 
 PCI DSS / Payment Security
 
 
 
 <ul>
 <li>
 PCIP (ISA) &ndash; PCI Professional (Internal Security Assessor)
 </li>
 <li>
 Qualified Security Assessor (QSA) (where applicable/available)
 
 
 </li>
 </ul>
 
 Audit / Compliance
 
 
 
 <ul>
 <li>
 CISA
 
 
 </li>
 </ul>
 
 Cloud / DevOps
 
 
 
 <ul>
 <li>
 AWS Certified DevOps Engineer &ndash; Professional
 </li>
 <li>
 AWS Certified Security &ndash; Specialty
 </li>
 <li>
 Microsoft Azure DevOps Engineer Expert (AZ-400)
 </li>
 <li>
 Microsoft Azure Security Engineer Associate (AZ-500)
 
 
 </li>
 </ul>
 Good to Have
 
 
 <ul>
 <li>
 Experience in telecom, government or regulated environments with audit-driven SDLC controls
 </li>
 <li>
 Exposure to container security, artifact repositories, and release governance patterns
 </li>
 <li>
 Automation skills (Python/Bash) to streamline scanning, reporting, and control enforcement
 </li>
 </ul>
</div>

SDLC Security Operations Engineer (DevSecOps)

NorthBay Solutions

<div>Job Title: SDLC Security Operations Engineer (DevSecOps)
Experience: 7&ndash;9 Years 
Location: Pakistan - Remote (UAE Business Hours) 
Employment Type: Full-Time
Job Summary
We are looking for a hands-on SDLC Security Operations Engineer to embed security controls into CI/CD pipelines and engineering workflows for a larger enterprise customer in the UAE. This role focuses on operationalizing DevSecOps integrating scanning tools, enforcing pipeline guardrails, reducing security debt, and ensuring SDLC controls align with ISO 27001, SOC 2, PIC/DSS etc.
Key Responsibilities<ul><li>
Integrate and operate security controls across CI/CD pipelines using GitHub, GitLab, Azure DevOps, and Jenkins</li><li>
Implement and manage SAST/DAST, dependency scanning, secret scanning, and pipeline security gates (build-time enforcement)</li><li>
Establish secure build and release practices: artifact integrity, signing/verification, and controlled promotions across environments</li><li>
Implement secure secrets management practices and prevent credential leakage in repos and pipelines</li><li>
Drive remediation workflows with developers: triage findings, validate fixes, reduce false positives, and improve rule tuning</li><li>
Embed security checks for infrastructure-as-code and configuration where applicable; ensure consistent secure-by-default patterns</li><li>
Support secure SDLC documentation, control mapping, and audit evidence for ISO 27001, SOC 2, etc. (policies, logs, approvals, attestations)</li><li>
Contribute to developer enablement via secure coding guidance, playbooks, and integration patterns that reduce friction</li></ul>
Required Skills &amp; Qualifications<ul><li>
7&ndash;9 years of experience in DevSecOps / Application Security Engineering / SDLC Security Operations</li><li>
Strong hands-on experience with CI/CD tools: GitHub, GitLab, Azure DevOps, Jenkins</li><li>
Hands-on experience operating AppSec tooling: SAST/DAST and software supply chain controls (dependency risk management)</li><li>
Strong understanding of secure SDLC concepts (threat modeling basics, security testing, release governance)</li><li>
Ability to collaborate deeply with engineering teams and translate findings into actionable fixes</li><li>
Familiarity with Linux-based build environments and common developer workflows</li></ul>
Preferred Certifications<ul><li>
CSSLP or equivalent application security certifications</li><li>
CISSP or CISM</li></ul>
PCI DSS / Payment Security:<ul><li>
PCIP (ISA) &ndash; PCI Professional (Internal Security Assessor)</li><li>
Qualified Security Assessor (QSA) (where applicable/available)</li></ul>
Audit / Compliance:<ul><li>
CISA</li></ul>
Cloud / DevOps:<ul><li>
AWS Certified DevOps Engineer &ndash; Professional</li><li>
AWS Certified Security &ndash; Specialty</li><li>
Microsoft Azure DevOps Engineer Expert (AZ-400)</li><li>
Microsoft Azure Security Engineer Associate (AZ-500)</li></ul>
Good to Have<ul><li>
Experience in telecom, government or regulated environments with audit-driven SDLC controls</li><li>
Exposure to container security, artifact repositories, and release governance patterns</li><li>
Automation skills (Python/Bash) to streamline scanning, reporting, and control enforcement</li></ul>
sknRErcj6z</div>

<div>Job Title: SDLC Security Operations Engineer (DevSecOps)
Experience: 7&ndash;9 Years 
Location: Pakistan - Remote (UAE Business Hours) 
Employment Type: Full-Time
Job Summary
We are looking for a hands-on SDLC Security Operations Engineer to embed security controls into CI/CD pipelines and engineering workflows for a larger enterprise customer in the UAE. This role focuses on operationalizing DevSecOps integrating scanning tools, enforcing pipeline guardrails, reducing security debt, and ensuring SDLC controls align with ISO 27001, SOC 2, PIC/DSS etc.
Key Responsibilities<ul><li>
Integrate and operate security controls across CI/CD pipelines using GitHub, GitLab, Azure DevOps, and Jenkins</li><li>
Implement and manage SAST/DAST, dependency scanning, secret scanning, and pipeline security gates (build-time enforcement)</li><li>
Establish secure build and release practices: artifact integrity, signing/verification, and controlled promotions across environments</li><li>
Implement secure secrets management practices and prevent credential leakage in repos and pipelines</li><li>
Drive remediation workflows with developers: triage findings, validate fixes, reduce false positives, and improve rule tuning</li><li>
Embed security checks for infrastructure-as-code and configuration where applicable; ensure consistent secure-by-default patterns</li><li>
Support secure SDLC documentation, control mapping, and audit evidence for ISO 27001, SOC 2, etc. (policies, logs, approvals, attestations)</li><li>
Contribute to developer enablement via secure coding guidance, playbooks, and integration patterns that reduce friction</li></ul>
Required Skills &amp; Qualifications<ul><li>
7&ndash;9 years of experience in DevSecOps / Application Security Engineering / SDLC Security Operations</li><li>
Strong hands-on experience with CI/CD tools: GitHub, GitLab, Azure DevOps, Jenkins</li><li>
Hands-on experience operating AppSec tooling: SAST/DAST and software supply chain controls (dependency risk management)</li><li>
Strong understanding of secure SDLC concepts (threat modeling basics, security testing, release governance)</li><li>
Ability to collaborate deeply with engineering teams and translate findings into actionable fixes</li><li>
Familiarity with Linux-based build environments and common developer workflows</li></ul>
Preferred Certifications<ul><li>
CSSLP or equivalent application security certifications</li><li>
CISSP or CISM</li></ul>
PCI DSS / Payment Security:<ul><li>
PCIP (ISA) &ndash; PCI Professional (Internal Security Assessor)</li><li>
Qualified Security Assessor (QSA) (where applicable/available)</li></ul>
Audit / Compliance:<ul><li>
CISA</li></ul>
Cloud / DevOps:<ul><li>
AWS Certified DevOps Engineer &ndash; Professional</li><li>
AWS Certified Security &ndash; Specialty</li><li>
Microsoft Azure DevOps Engineer Expert (AZ-400)</li><li>
Microsoft Azure Security Engineer Associate (AZ-500)</li></ul>
Good to Have<ul><li>
Experience in telecom, government or regulated environments with audit-driven SDLC controls</li><li>
Exposure to container security, artifact repositories, and release governance patterns</li><li>
Automation skills (Python/Bash) to streamline scanning, reporting, and control enforcement</li></ul>
l9l3kZpOZg</div>

<div></div><div><div><div><div><ul><div>5 - 7 Years</div>
<div></div><div>1 Opening</div>
 <div>Hyderabad</div></ul></div><div> 
<div><div>
</div></div></div></div><div></div><div><h3 class="jobSectionHeader">Role description</h3>
<div><div>Qualifications: 
<ul><li>Minimum of 5 years of experience in security, with a focus on WAF, IPS, and firewalls.</li><li>Proficiency in managing Checkpoint or Fortinet firewalls.</li><li>Strong experience with AWS cloud services.</li><li>Intermediate proficiency in Python programming is required.</li><li>Experience with DevOps tools such as Jenkins, Docker, Kubernetes, or similar.</li><li>Ability to work within the Agile framework is desired.</li><li>Excellent problem-solving skills and attention to detail.</li><li>Strong communication and teamwork skills.</li><li>Relevant certifications such as CISSP, CEH, or AWS Certified Security are a plus.</li></ul> 
Key Responsibilities: 
 
<ul><li>Design, implement, and manage Cloud Web Application Firewalls to protect web applications from security threats.</li><li>Provide SME expertise on security incidents, audits, and high priority escalations</li></ul> 
<ul><li>Configure and maintain Intrusion Prevention Systems to detect and prevent security breaches.</li><li>Manage and optimize Checkpoint or Fortinet firewalls to ensure network security.</li><li>Collaborate with the security team to develop and enforce security policies and procedures.</li><li>Monitor and analyze security logs to identify and respond to potential security incidents.</li><li>Conduct regular security assessments and review vulnerability scans to identify and mitigate risks.</li><li>Develop and maintain documentation for security configurations, processes, and procedures.</li><li>Provide technical support and guidance to other team members on security-related issues.</li></ul> 
Preferred Skills: 
<ul><li>Experience with other security tools and technologies.</li><li>Knowledge of network protocols and security best practices.</li><li>Ability to work in a fast-paced and dynamic environment.</li></ul></div></div>
<h3 class="jobSectionHeader">Skills</h3>
<div>Cloud Web Application Firewalls,Network Protocols,Security Tools and Technologies</div></div></div></div>
 <div><h3 class="jobSectionHeader">About UST</h3>
<div>UST is a global digital transformation solutions provider. For more than 20 years, UST has worked side by side with the world&rsquo;s best companies to make a real impact through transformation. Powered by technology, inspired by people and led by purpose, UST partners with their clients from design to operation. With deep domain expertise and a future-proof philosophy, UST embeds innovation and agility into their clients&rsquo; organizations. With over 30,000 employees in 30 countries, UST builds for boundless impact&mdash;touching billions of lives in the process.</div></div>

Platform SecOps Engineer

<div>
 Job Title: Platform SecOps Engineer
 
 
 Experience: 7&ndash;9 Years
 
 
 Location: Pakistan - Hybrid (UAE Business Hours)
 
 
 Employment Type: Full-Time
 
 
 
 Job Summary
 
 
 
 We are seeking a hands-on Platform SecOps Engineer to implement and operate security controls across hybrid and on-premises infrastructure for a large enterprise customer in the UAE. This role is responsible for platform hardening, security tooling operations (SIEM/EDR/CSPM), vulnerability remediation, and incident response support, ensuring alignment with ISO 27001 SOC 2, PIC/DSS and/or other compliance requirements as per customer business needs.
 
 
 Key Responsibilities
 
 
 <ul>
 <li>
 Operate and continuously improve security controls across hybrid and on-prem platforms (compute, virtualization, OS, network services)
 </li>
 <li>
 Administer and tune security tooling including SIEM, EDR, and CSPM; drive alert quality improvements and reduce noise
 </li>
 <li>
 Implement and enforce secure configuration baselines (CIS or equivalent), hardening standards, and patching/upgrade coordination
 </li>
 <li>
 Manage security logging strategy: log onboarding, parsing, normalization, correlation rules, dashboards, and alerting use-cases
 </li>
 <li>
 Perform vulnerability scanning, exposure management, and remediation tracking with clear SLAs and risk-based prioritization
 </li>
 <li>
 Support incident response activities (triage, containment support, evidence collection, escalation) and post-incident improvements
 </li>
 <li>
 Strengthen identity and access controls for platform administration (least privilege, privileged access patterns, access reviews)
 </li>
 <li>
 Maintain security runbooks, SOPs, and operational documentation; contribute to audit evidence preparation for ISO 27001/SOC 2, etc.
 </li>
 <li>
 Collaborate with infrastructure and operations teams to embed security into day-to-day BAU, including change management and release windows
 
 
 </li>
 </ul>
 
 Required Skills &amp; Qualifications
 
 
 
 <ul>
 <li>
 7&ndash;9 years of experience in Platform Security / SecOps / Infrastructure Security
 </li>
 <li>
 Strong hands-on experience operating SIEM, EDR, and CSPM platforms in production environments
 </li>
 <li>
 Practical expertise in Linux/Windows hardening, endpoint/server security, and baseline enforcement
 </li>
 <li>
 Solid understanding of vulnerability management lifecycle (scan &rarr; triage &rarr; remediation &rarr; verification)
 </li>
 <li>
 Exposure to hybrid/on-prem environments including virtualization (VMware/Hyper-V) and core network security fundamentals
 </li>
 <li>
 Ability to write clear runbooks and work effectively across operations, infrastructure, and security stakeholders
 
 
 </li>
 </ul>
 
 Preferred Certifications
 
 
 
 <ul>
 <li>
 CompTIA Security+, CySA+
 </li>
 <li>
 CISSP or CISM
 
 
 </li>
 </ul>
 
 PCI DSS / Payment Security
 
 
 
 <ul>
 <li>
 PCIP (ISA) &ndash; PCI Professional (Internal Security Assessor)
 </li>
 <li>
 Qualified Security Assessor (QSA) (where applicable/available)
 
 
 </li>
 </ul>
 
 Audit / Compliance
 
 
 
 <ul>
 <li>
 CISA (especially valuable for controls testing and evidence)
 
 
 </li>
 </ul>
 
 Cloud Security
 
 
 
 <ul>
 <li>
 AWS Certified Security &ndash; Specialty
 </li>
 <li>
 AWS Certified Solutions Architect &ndash; Associate or Professional
 </li>
 <li>
 Microsoft Azure Security Engineer Associate (AZ-500)
 </li>
 <li>
 Microsoft Azure Solutions Architect Expert (AZ-305)
 
 
 </li>
 </ul>
 Good to Have
 
 
 <ul>
 <li>
 Experience supporting telecom, government or regulated environments
 </li>
 <li>
 Working knowledge of ISO 27001, SOC 2, PCI/DSS evidence collection and operational controls
 </li>
 <li>
 Scripting/automation skills (Python, Bash, PowerShell) for operational efficiency
 </li>
 </ul>
</div>

help AG

<div>Help AG is looking for a talented and experience Senior Security Engineer who will be responsible for the creation of procedures, implementation of process development, and maintenance of security systems across internal and client environments. The Security Engineer will work closely with Management, Senior Engineers, Threat Analysts, Solution Architects, other Security Engineers, and clients to complete high profile, critical services to existing Managed Security Service clients.
The Senior Security Engineer will be responsible for the administration, maintenance, and integration of Splunk, Cribl, Azure Sentinel, EDR platforms for security operations technical analysis, assessment, and recommendations in the areas of real-time security, operational network &amp; identity management system, and applications systems security monitoring. 
Responsibilities<ul><li>
Administering Splunk and Splunk Apps to include developing new or extending existing Apps to perform specialized functionality. Integrating Splunk with a wide variety of legacy data sources.</li><li>
Engaging application and infrastructure teams to establish best practices for utilizing Splunk data and visualizations.</li><li>
Design, implement, and support solutions with Microsoft security technologies such as Azure Cloud Access Security Broker, Office 365</li><li>
Advanced Threat Protection (O365 ATP), Microsoft Defender ATP, and their integrations used to deliver internet-scale intelligence and managed security products.</li><li>
Implement &amp; administer Microsoft Defender (ATP), Azure Cloud Access Security Broker &amp; Azure Threat Protection security products within customer environment Manage and oversee day-to-day activities of Azure IP platform and ensure adherence to enterprise standards in project execution methodology, requirements gathering, quality assurance, and continuous improvement.</li><li>
Handle the implementation/deployment/support of Nessus scan engines and Tenable Security Center and peripherals with Engineering, SOC, TIU, and IR.</li><li>
Maintain local and network credentials, Tenable Security Center, and provisions access to vulnerability scanning systems.</li><li>
Integrate Nessus/TSC with other security and IT systems management tools.</li><li>
Document vulnerabilities and work on vulnerability mitigation with agreed SLA.</li><li>
Managing CB sensors including deployment, operation, management, maintenance, update, upgrade, patching, and administration.</li><li>
Should be able to create watchlists to detect indicators of compromise (IOCs) and malicious behavior of new threats.</li><li>
Hands on in writing queries in CB to search the desired events.</li><li>
Assess customer needs and expectations, design solutions to meet those needs, and then implement the design.</li><li>
Quickly build and solve a problem using a new technology to determine viability.</li><li>
Serve as a primary responder for Managed Security customer systems, taking ownership of client configuration issues and tracking through resolution.</li></ul>
Qualifications &amp; Skills<ul><li>
College degree or equivalent training with experience working in a Security Operations Center, Managed Security, or client network environment.</li><li>
Minimum 7 years of professional experience supporting and maintaining SPLUNK SIEM System.</li><li>
5-6 years of experience with advanced tuning of Splunk SIEM content.</li><li>
Experience in Cribl.
</li><li>Professional experience working with networks and network architecture.</li><li>
Information security knowledge in one or more areas such as EDR &ndash; Enterprise end-point security products (e.g., McAfee e-Policy Orchestrator, Virus Scan, Anti-Spyware, Host Data Loss Protection, Endpoint Encryption, etc.)</li><li>
Practical hands-on experience in EDR (Carbon Black), Vectra, and Microsoft Azure.</li><li>
Splunk, Azure Log analytics, or equivalent big data engine experience.</li><li>
Experience with MS Azure Information Protection and technologies, including solution architecture, deployment, management, and support in a large global enterprise.</li><li>
General security knowledge, certificates on Splunk Admin, Splunk Architect, Splunk Consultant is a must. Also, good to have is Azure, Managed vulnerability (Nessus/Tenable), EDR (Carbon Black) and Firewall related security certifications.</li><li>
Knowledge of Linux and Windows Operating Systems.</li><li>
Experience with various other SIEM security products such as: Splunk, ArcSight, Nitro, or LogRhythm and infrastructure components such as proxies, firewalls, IDS/IPS, and DLP.</li><li>
Experience working with clients in a service delivery function.</li><li>
Shift flexibility, including the ability to provide after-hours support when needed.</li><li>
Experience working with internal and client ticketing and knowledge base systems for Incident and Problem tracking as well as procedures.</li></ul>
Benefits 
<ul><li>
Health insurance with one of the leading global providers for medical insurance.</li><li>
Career progression and growth through challenging projects and work.</li><li>
Employee engagement and wellness campaigns activities throughout the year.</li><li>
Excellent learning and development opportunities.</li><li>
Annual Flight tickets to home country.</li><li>
Inclusive and diverse working environment.</li><li>
Flexible/Hybrid working environment.</li><li>
Open door policy.</li></ul>
About Us
Help AG is the cybersecurity arm of e&amp; enterprise (formerly Etisalat Digital) and provides leading enterprise businesses and governments across the Middle East with strategic consultancy combined with tailored information security services and solutions that address their diverse requirements, enabling them to evolve securely with a competitive edge. 
Present in the Middle East since 2004, Help AG was strategically acquired by e&amp; (formerly Etisalat Group) in Feb 2020, hence creating a cybersecurity and digital transformation powerhouse in the region. 
Help AG has firmly established itself as the region's trusted IT security advisor by remaining vendor-agnostic, trustworthy, independent, and cybersecurity focused. With best-of-breed technologies from industry-leading vendor partners, expertly qualified service delivery teams and a state-of-the-art consulting practice, Help AG delivers unmatched value to its customers by strengthening their cyber defenses and safeguarding their business.</div>

Senior Security Engineer - Splunk, Cribl & Azure Sentinel

Search 10000+ Security operations engineer jobs near you this February. New roles added regularly across leading industries. Apply today.

10000 security operations engineer jobs NEAR_ME

SDLC Security Operations Engineer (DevSecOps)

SDLC Security Operations Engineer (DevSecOps)

SDLC Security Operations Engineer (DevSecOps)

Network Security Operations Engineer

Platform SecOps Engineer

Platform SecOps Engineer

Senior Security Engineer - Splunk, Cribl & Azure Sentinel