Information Security Specialist

About the role:

As an information security specialist based in Dubai, you will be responsible for safeguarding our organization’s digital assets by implementing robust security measures. You will conduct vulnerability assessments, penetration tests, and threat hunting exercises, while managing identity and access solutions. Collaborating with cross-functional teams, you will drive continuous improvement in our security posture and ensure compliance with industry standards.

Responsibilities:

Conduct regular vulnerability assessments and penetration tests across network, web, and application layers

Deploy and manage Tenable vulnerability management solutions, analyze scan results, and prioritize remediation efforts

Implement and maintain identity and access management (IAM) and privileged access management (PAM) technologies

Perform threat hunting activities using endpoint and network telemetry to detect and respond to advanced threats

Develop, update, and enforce information security policies, standards, and procedures

Collaborate with IT, DevOps, and business teams to integrate security into the software development lifecycle

Monitor security alerts and coordinate incident response activities

Prepare security reports and metrics for senior management and stakeholders

Required qualifications:

3–5 years of hands-on experience in information security roles

Proficient in vulnerability assessment and penetration testing methodologies

Expertise with Tenable vulnerability management tools (Nessus, Tenable.io)

Hands-on experience with IAM solutions (e.g., Okta, Azure AD) and PAM tools (e.g., CyberArk, BeyondTrust)

Strong threat hunting skills and familiarity with threat intelligence frameworks

Solid understanding of security frameworks and standards (ISO 27001, NIST, PCI DSS)

Bachelor’s degree in computer science, information security, or a related field

Excellent analytical, problem-solving, and communication skills

Preferred qualifications:

Professional certifications such as OSCP, CISSP, CEH, or CISM

Experience with cloud security in AWS, Azure, or Google Cloud Platform

Familiarity with SIEM platforms (e.g., Splunk, QRadar) and security orchestration tools

Scripting skills in Python, PowerShell, or Bash for automation

Previous experience in incident response and digital forensics

Knowledge of network security technologies (firewalls, IDS/IPS)

Position details:

Location: Dubai, United Arab Emirates

Industry: Information technology (IT) / Software

Experience required: 3+ years