Cybersecurity Specialist

Job Purpose

Key Responsibilities

• Conduct penetration testing and security assessments across web applications, APIs, networks, servers, Active Directory, and enterprise systems.
• Identify vulnerabilities, assess risk and exploitability, and provide practical remediation recommendations.
• Perform manual testing against OWASP Top 10 and OWASP API Security Top 10 risks.
• Monitor security events and alerts, investigate incidents, and support response, containment, remediation, and post-incident improvements.
• Develop and tune SIEM alerts, detection rules, dashboards, and monitoring use cases.
• Coordinate vulnerability remediation with infrastructure and development teams.
• Review Azure and AWS environments and support identity, network, logging, workload, and configuration security controls.
• Strengthen Active Directory and Entra ID security, including privileged access, service accounts, authentication controls, and Group Policy.
• Support endpoint security, web application firewalls, SIEM, vulnerability management, and identity security controls.
• Participate in security reviews, governance, risk assessments, compliance activities, and audits.

Required Experience

• Hands-on enterprise cybersecurity experience implementing, administering, or improving technical security controls.
• Professional penetration testing and vulnerability assessment experience.
• Strong web application, API, network, operating system, enterprise infrastructure, and identity security knowledge.
• Experience with SIEM and security monitoring platforms, including Wazuh, Microsoft Sentinel, Splunk, or similar.
• Experience investigating cybersecurity alerts and security incidents.
• Experience with Azure and/or AWS cloud security.
• Strong Windows, Linux, TCP/IP, networking, authentication, and Active Directory knowledge.
• Understanding of cybersecurity governance, risk management, policies, standards, and compliance.

Qualifications and Certifications

• A bachelor's degree in Cybersecurity, Computer Science, Information Technology, Computer Engineering, or a related field is specified.
• OSCP, OSWE, or OSEP certification is strongly preferred.
• Hack The Box certifications and additional cloud, Microsoft, incident response, penetration testing, infrastructure security, or governance certifications are advantageous.
• UAE government, semi-government, higher education, or regulated-organization cybersecurity experience is highly desirable.

Strong Advantages

• Web development knowledge covering applications, APIs, databases, authentication, sessions, and backend services.
• Familiarity with Python, PHP, JavaScript, .NET, Java, Flask, Django, Node.js, or similar technologies.
• Windows or Linux server administration, including permissions, hardening, logging, and troubleshooting.
• Active Directory penetration testing or security assessment experience.
• Experience with Entra ID, Conditional Access, Privileged Identity Management, Defender, Sentinel, and Intune.
• Scripting or automation using PowerShell, Python, Bash, or similar technologies.

Key Competencies