About the Role / About the Job
As a key member of the security team, you will be involved in a critical role that ensures the integrity and security of our platform. Your responsibilities will encompass monitoring the platform 24/7, responding to alerts, troubleshooting issues, and restoring services as necessary. You will also manage emergencies, ensuring that client requests are handled promptly. Your expertise will aid in protecting our systems through regular vulnerability assessments, patch management, and implementing robust security controls.
Ready to apply for roles like this?
Unlock the company name and direct application link. Subscribers get instant access to fresh jobs across Dubai, Abu Dhabi and Riyadh, many with visa support.
Unlock employer & apply directly
Key Responsibilities
- Monitor the platform around the clock, respond to alerts, troubleshoot, fix and restore service.
- Handle emergencies inside or outside office hours and turn around any report the client asks.
- Patch, harden and run regular vulnerability reviews on every component; keep endpoint protection compatible.
- Implement and operate security controls, including identity and access management with MFA, RBAC, and single sign-on; encryption; separated dev, test, and production environments; signed and verified automation code; file-type whitelisting; and mobile-device restrictions.
- Run security logging and maintain audit logs, including SIEM integration; protect logs from tampering.
- Secure APIs using gateway management, OAuth 2.0, and OWASP API security standards.
- Manage backups, business continuity, and disaster recovery processes, and regularly test these measures.
- Lead incident response efforts, offering immediate notification, initial reports within 24 hours, documented procedures with SLAs, and escalation protocols.
- Write security architecture and API design documents and contribute to infrastructure architecture documentation and bi-monthly operations reports.
What You Need
- Proficient in Linux and Windows server administration on public and sovereign clouds (such as GCP, OCI, Deem, or similar).
- Experienced in the administration of at least two of Qlik Sense, Talend, Dataiku, and MS SQL Server, as well as GCP services.
- Proficient in monitoring and alerting tools (such as Cloud Logging and Monitoring, Prometheus, Grafana, or similar) and create runbooks.
- Knowledgeable in incident management, including triage, escalation, and root-cause analysis.
- Strong understanding of identity and access management principles (IAM, MFA, RBAC, SSO integration).
- Experience in encryption practices, including at rest and in transit, key management, and certificates.
- Skilled in vulnerability scanning, patching, hardening processes, and working with endpoint-protection tools.
- Familiarity with SIEM integration and audit-log design.
- Competent in securing APIs and working with API gateways, OAuth 2.0, and OWASP API Security Top Ten.
- Experience in backup, restore procedures, business continuity, and disaster recovery in the cloud.
Good to Have
- Experience with Terraform and CI/CD practices; knowledge of SRE principles including SLOs, error budgets, and cost alerts.
- In-depth MS SQL Server DBA experience.
- Certifications such as Google Professional Cloud Security Engineer, CISSP, CCSP, or ITIL.
- Experience with national cybersecurity-control audits.
