Cybersecurity Specialist

Job description

Provide secured remote operational support across identity and access management and vulnerability management. The role performs approved technical activities and tracking; access approvals, security policy, risk acceptance and regulatory accountability.

Support user, privileged and service-account administration through approved requests and access workflows.

Assist with periodic access reviews, joiner/mover/leaver controls and evidence preparation.

Operate approved vulnerability scanning and reporting tools and validate findings with system owners.

Maintain vulnerability, exception and remediation trackers and coordinate technical follow-up.

Support IAM, MFA, privileged-access and directory-service incidents within authorised access boundaries.

Provide metrics, evidence and trend analysis for security reporting and governance reviews.

Escalate overdue, critical or policy-related matters to the onsite Security Engineer.

Maintain operational procedures, access-control records and vulnerability-management documentation.

Requirements

Minimum 5 years of relevant IAM and/or vulnerability-management experience, with credible practical exposure to both domains.

Experience with Microsoft identity services, SailPoint, CyberArk or equivalent IAM/PAM platforms.

Experience with enterprise vulnerability-scanning and remediation-tracking platforms.

Microsoft Identity, SailPoint, CyberArk, CEH, OSCP, GPEN or equivalent certification preferred.

Strong understanding of privileged access, least privilege, remediation governance and audit evidence.

Preferred profile

Previous experience supporting UAE government or regulated cybersecurity environments.

Working knowledge of TDRA-hosted environments and related security-access processes.

Experience operating through secured remote-access and privileged-session controls.

Expected contribution

Access and vulnerability activities are completed only through approved workflows.

Critical findings and overdue actions are escalated with clear ownership.

Evidence and trackers remain accurate, current and audit-ready.