مهندس عمليات الأمن السيبراني

Job Summary
We are looking for a detail-oriented and proactive SecOps Engineer to join our security team, responsible for supporting and enhancing the organization’s security operations and engineering capabilities. This role will focus on implementing, maintaining, and optimizing key security frameworks, controls, and tools to safeguard the company’s infrastructure, applications, and data assets.

Responsibilities

• Implement and maintain security frameworks for building and deploying new applications, including third-party risk assessments, access management, and periodic access reviews to enforce the principle of least privilege.

• Conduct API and API key security assessment.

• Skilled for Azure Cloud to Hands on, troubleshoot and evaluate cloud security capabilities on your own.

• Conduct GDPR DPIA assessment, security compliance assessment, permission management, attack surface security assessment.

• Review and approve change requests raised in support of development teams, such as network port configurations and DNS requests, against defined protocols to ensure a secure public DNS footprint.

• Monitor and review the status of Web Application Firewalls (WAF), Security Operations Center (SOC) integrations, and Microsoft Defender for Cloud (MDC), and follow up on alerts and recommendations.

• Perform security testing on login portals to ensure strong authentication controls (e.g., MFA, password policies, account lockout, session management) are implemented, and work with developers to remediate gaps and enhance portal security.

• Review and enforce secrets management practices, ensuring keys, certificates, and credentials are securely stored, rotated, and accessed through Key Vault solutions (e.g., Azure Key Vault).

• Prepare security reports, trackers, access review records, and documentation using Microsoft Office tools (Excel, Word, PowerPoint).

• Collaborate with internal teams to ensure security controls are effectively integrated into infrastructure and applications.

Requirements

• Bachelor's degree in Computer Science, Information Security, or a related field.

• 3–4 years of hands-on experience in information security operations or engineering.

• Familiar with Devsecops security, SAST, application security, API security and cloud operation.

• Familiar with VAPT, GDPR, Azure cloud operations hands on technology.

• Familiarity with security frameworks and standards such as ISO 27001, NIST, OWASP, and PCI DSS.

• Working knowledge of access control systems, DNS/network configurations, and application security principles.

• Experience with ITSM platforms (e.g., Freshworks, Jira Service Management) and WAF/SOC tools.

• Hands-on exposure to cloud security tooling, preferably Microsoft Defender for Cloud and the Azure ecosystem.

• Understanding of authentication mechanisms (MFA, SSO, OAuth/OIDC) and common login-related vulnerabilities (OWASP Top 10).

• Knowledge of API security, secrets management, and Key Vault solutions.

• Proficiency in Microsoft Office, particularly Excel (data analysis, pivot tables) and Word for reporting and documentation.

• Strong analytical and problem-solving skills with attention to detail.