Summary
Astra Tech is seeking a SecOps Engineer to support and improve security operations and engineering in Abu Dhabi. The role covers cloud and application security, API assessments, access management, security testing, secrets management, monitoring WAF and SOC integrations, and reviewing infrastructure changes. Applicants should have a bachelor's degree in a related field and 3–4 years of hands-on security operations or engineering experience. Familiarity with Azure, security frameworks, authentication controls, and ITSM platforms is required.
The posting
As published on astratech.ae. Pulled from the employer's site and shown as they wrote it.
Job Summary
We are looking for a detail-oriented and proactive SecOps Engineer to join our security team, responsible for supporting and enhancing the organization’s security operations and engineering capabilities. This role will focus on implementing, maintaining, and optimizing key security frameworks, controls, and tools to safeguard the company’s infrastructure, applications, and data assets.
Responsibilities
• Implement and maintain security frameworks for building and deploying new applications, including third-party risk assessments, access management, and periodic access reviews to enforce the principle of least privilege.
• Conduct API and API key security assessment.
• Skilled for Azure Cloud to Hands on, troubleshoot and evaluate cloud security capabilities on your own.
• Conduct GDPR DPIA assessment, security compliance assessment, permission management, attack surface security assessment.
• Review and approve change requests raised in support of development teams, such as network port configurations and DNS requests, against defined protocols to ensure a secure public DNS footprint.
• Monitor and review the status of Web Application Firewalls (WAF), Security Operations Center (SOC) integrations, and Microsoft Defender for Cloud (MDC), and follow up on alerts and recommendations.
• Perform security testing on login portals to ensure strong authentication controls (e.g., MFA, password policies, account lockout, session management) are implemented, and work with developers to remediate gaps and enhance portal security.
• Review and enforce secrets management practices, ensuring keys, certificates, and credentials are securely stored, rotated, and accessed through Key Vault solutions (e.g., Azure Key Vault).
• Prepare security reports, trackers, access review records, and documentation using Microsoft Office tools (Excel, Word, PowerPoint).
• Collaborate with internal teams to ensure security controls are effectively integrated into infrastructure and applications.
Requirements
• Bachelor's degree in Computer Science, Information Security, or a related field.
• 3–4 years of hands-on experience in information security operations or engineering.
• Familiar with Devsecops security, SAST, application security, API security and cloud operation.
• Familiar with VAPT, GDPR, Azure cloud operations hands on technology.
• Familiarity with security frameworks and standards such as ISO 27001, NIST, OWASP, and PCI DSS.
• Working knowledge of access control systems, DNS/network configurations, and application security principles.
• Experience with ITSM platforms (e.g., Freshworks, Jira Service Management) and WAF/SOC tools.
• Hands-on exposure to cloud security tooling, preferably Microsoft Defender for Cloud and the Azure ecosystem.
• Understanding of authentication mechanisms (MFA, SSO, OAuth/OIDC) and common login-related vulnerabilities (OWASP Top 10).
• Knowledge of API security, secrets management, and Key Vault solutions.
• Proficiency in Microsoft Office, particularly Excel (data analysis, pivot tables) and Word for reporting and documentation.
• Strong analytical and problem-solving skills with attention to detail.