Senior System Security Risk Control Engineer

About the role

Careers International is hiring a Senior System Security Risk Control Engineer in Dubai. The role covers designing and implementing the company's information security strategy, running security assessments and penetration tests, and building a secure, well-trained security team.

Key responsibilities

• Develop and implement the company's overall information security strategy and management system, and design security management processes to protect systems, data and networks.
• Conduct security assessments of internal systems, networks and servers, and work with teams to implement security solutions and track progress.
• Lead penetration testing to find weaknesses, run intrusion detection, alarm generation and trace analysis, and implement measures to prevent further risks.
• Monitor emerging vulnerabilities, including web application attacks such as SQL injection and XSS, and develop mitigation strategies.
• Guide and train team members, and keep documentation and security protocols up to date.

Required profile

• At least 3 years of hands-on experience in system security or related fields, with expertise in security risk assessment and mitigation.
• Degree in System Security, Computer Science, Information Technology or a related field.
• Hands-on experience formulating security policies, handling incidents and responding to security breaches.
• Proficiency in Chinese and English, written and spoken.

Required skills

• Strong understanding of Linux and Windows operating systems and related security policies and procedures.
• Familiarity with web application servers and security protocols.
• Proficiency with mainstream security tools such as IDS/IPS, firewalls and monitoring systems.
• Experience with penetration testing, web application security, vulnerability discovery and risk assessment.