Cybersecurity Expert (IoT & Infrastructure Security)
Location: Dubai, UAE
We are hiring a Cybersecurity Expert to design, harden, and implement end-to-end security architecture across connected devices, applications, cloud, and core infrastructure.
Key Responsibilities
- Security Architecture & Zero Trust: Define and implement robust security controls, network segmentation, and access policies across web, mobile, API, IoT, and on-premise systems.
- IoT & Embedded Collaboration: Partner directly with Embedded Engineers to secure device identities, firmware update mechanisms, communication channels, and per-device certificates.
- Identity & Cryptography: Establish and review standards for PKI, TLS/mTLS, secrets management, authentication (OAuth2/OIDC, RBAC), and encryption.
- Assessments & Threat Mitigation: Lead vulnerability management, coordinate penetration testing, and hardened system configurations (Linux, firewalls, network controls).
- Incident Response & Monitoring: Develop incident handling procedures, define security logging/SIEM requirements, and conduct forensic investigations for security events.
What You Bring
- Experience: 5+ years of dedicated hands-on background in Cybersecurity or Information Security.
- Core Technical Stack: Strong expertise in Linux system hardening, Web/API security (OWASP Top 10), network segmentation, VPNs, and firewalls.
- IAM & PKI: Proven experience implementing PKI, TLS/mTLS, certificate management, OAuth2, and OIDC.
- Defensive & Offensive Capabilities: Hands-on experience with SIEM log monitoring, vulnerability scanning, penetration testing methodologies, and incident response.
Nice-to-Have Skills
- IoT Security: Experience with MQTT security, Secure Boot, per-device certificates, and firmware-signing concepts.
- Tooling: Hands-on familiarity with HashiCorp Vault, Keycloak, or securing AI models/local AI infrastructure.
- Certifications & Frameworks: Industry credentials (OSCP, CISSP, CEH, Security+) or working knowledge of ISO 27001, NIST, or CIS benchmarks.
