Lead Cyber Security Engineer

About the role

A hands-on technical security lead is sought to build, run and test security controls and to lead compliance for a CBUAE-regulated insurer. The role is not strategy-only or GRC-only: about 70% of the time is spent on technical work, with the remaining 30% proving compliance using the evidence produced.

Key responsibilities

• Run security operations as the in-house technical owner of an outsourced SOC (MSSP), including triage, building detections (including insurance-specific threats such as claims fraud and health data exfiltration), purple-team testing and major incident leadership
• Own core controls hands-on: DLP (Purview/Forcepoint), Intune/MDM, patching and vulnerability management prioritised by CVSS, EPSS and CISA KEV
• Secure business applications (policy, claims, underwriting platforms, ERP, portals, mobile apps and APIs), set vendor security requirements and give security sign-off before go-live
• Manage VAPT: scope and commission tests, reproduce key findings and close them only on evidence
• Harden endpoints, infrastructure and the network, including EDR/XDR, Azure/AWS/M365, Entra ID, PAM, zero trust, and firewall and WAF reviews
• Lead GRC and reporting: maintain an audit gap tracker, a unified control framework (ISO 27001, ADHICS, UAE IA, CBUAE, PDPL) and produce monthly metrics plus a quarterly cyber risk report for the Board

Required profile

• 8-12 years of hands-on cyber security engineering or operations experience
• Track record managing an outsourced SOC, leading incidents, running VAPT and vulnerability programmes, and closing audit findings
• ISO 27001 implementation or audit experience
• Direct experience with UAE regulators: CBUAE, UAE IA, DoH/ADHICS or DHA
• Bachelor's degree in Computer Science, Information Security, Engineering or a related field
• Nice to have: insurance, takaful, brokers or TPAs background, or exposure to DESC ISR, SAMA CSF or NCA ECC

Required skills

• At least one hands-on technical certification (OSCP, GCIH, GCIA, GCFA, GPEN, AZ-500, or a firewall/EDR vendor cert); CISSP, CISM, CISA and similar are a plus
• PowerShell or Python scripting for automation

To apply, candidates should send their CV to the employer's HR team.