About the Role
This position is for a Senior Engineer who will lead the service and perform hands-on remediation on the most complex and security-critical systems. You will own KPI/SLA governance, prioritization, risk sign-off, CAB representation, quality assurance, and mentoring of Engineers 1 and 2. Additionally, you will be responsible for fixing and patching network and security infrastructure (including firewalls, NAC, IPS/IDS) and leading complex server, virtualization, and cloud remediation efforts. Acting as the technical escalation point for both onsite and offsite engineers, you will safeguard the integrity of Customer-aligned KPIs.
Ready to apply for roles like this?
Unlock the company name and direct application link. Subscribers get instant access to fresh jobs across Dubai, Abu Dhabi and Riyadh, many with visa support.
Unlock employer & apply directly
Key Responsibilities
- Own the Customer-aligned KPI framework (Patch Time, Coverage, Availability); validate KPI calculation and monthly reporting accuracy.
- Provide prioritization sign-off and risk classification for high-impact and critical findings; advise remediation approaches to system owners.
- Personally fix and patch security and network infrastructure — next-gen firewalls, NAC, IPS/IDS, routers/switches — and lead complex server, virtualization, and cloud remediation.
- Represent the service at the client's Change Advisory Board; enforce change governance, rollback rigor, and audit-ready evidence.
- Run aging and exception governance — surface stale findings weekly; document owner-side delays and risk acceptances per the SLA/service-credit model.
- Lead root-cause analysis of recurring vulnerabilities and drive continuous-improvement actions.
- Direct the daily work allocation between the onsite and offsite engineers and act as their technical escalation point.
- Quality-assure change records, re-scan evidence, and the weekly/monthly reporting pack before client submission.
- Mentor and develop the two engineers; maintain runbooks and cross-training so onsite and offsite coverage is interchangeable.
Basic Qualifications
- 6–10 years in network/security engineering with a strong vulnerability management background.
- Deep hands-on patching and upgrades of security infrastructure — next-gen firewalls (Palo Alto / Fortinet), NAC (Cisco ISE), IPS/IDS and network devices — plus servers, virtualization, and cloud.
- Familiarity with Qualys to run scans and obtain vulnerability details and reports.
- Strong networking (routing/switching, segmentation), Windows/Linux, virtualization, and cloud (Azure) awareness.
- Solid grasp of vulnerability management, threat/exploitability context, CVSS, and remediation strategy.
- ITIL change management and CAB processes; SLA/KPI governance and reporting to enterprise/government stakeholders.
- Experience leading a small delivery team across mixed onsite and remote coverage models.
- Excellent communication, leadership, mentoring, and documentation skills.
Preferred Qualifications
- Preferred certifications in CCNP Security or CCIE Security; PCNSE (Palo Alto) or Fortinet NSE; Cisco ISE; Qualys VMDR; CISSP or CISM; ITIL.
- Leadership and ownership mindset; comfortable owning KPIs and audits for a government client; strong mentor.
Why Join Us
We foster a culture of innovation, collaboration, and continuous learning. We are committed to building a diverse and inclusive workplace where everyone can thrive and contribute their best work. If you’re passionate about technology and eager to make an impact, we’d love to hear from you.
We are an equal opportunity employer. We welcome applicants from all backgrounds and thank all who apply; however, only those selected for an interview will be contacted.
