Senior Engineer - Cyber Security

Overview About Presight Presight is an ADX-listed public company with Abu Dhabi based G42 as its majority shareholder and is the region’s leading big data analytics company powered by Gen AI. It combines big data, analytics, and AI expertise to serve every sector, of every scale, to create business and positive societal impact. Presight excels at all-source data interpretation to support insight-driven decision-making that shapes policy and creates safer, healthier, happier, and more sustainable societies. Today, through its range of Gen AI-driven products and solutions, Presight is bringing Applied AI to the private and public sector, enabling them to realize their AI strategy and ambitions faster. Position Overview We are seeking a detail-oriented Senior Security Engineer who is highly skilled in Implementing and managing security controls, conducting security assessments, and responding to incidents, ensuring secure data transfer and storage. This role involves collaboration with cross-functional teams and leveraging advanced analytics tools. Join us at Presight, where we offer a culture of innovation, outstanding career growth opportunities, and competitive rewards. If you're eager to conquer new frontiers in AI and thrive in a dynamic environment, we welcome you to our community. What working at Presight offers: Culture: An open, diverse and inclusive environment with a global vision that encourages personal growth and focuses on ground-breaking, industry-first innovations. Career: Outstanding learning, development & growth opportunities via structured training programs and innovative, high-tech projects. Rewards: A competitive remuneration package with a host of perks including healthcare, education support, leave benefits and more. Responsibilities Architect, deploy, and manage security controls across EDR, NDR, PAM, SIEM (Splunk), MDM, and endpoint security ecosystems, ensuring continuous threat visibility and response. Conduct in-depth security assessments, vulnerability scans, and risk evaluations, leveraging automated scanning tools and manual validation techniques to identify and mitigate threats. Execute penetration testing and red teaming exercises, validating vulnerabilities using industry-standard tools like Nessus, Kali Linux, and custom exploit frameworks. Establish and enforce Zero Trust security architecture, hardening systems based on CIS Benchmarks and aligning with security frameworks such as NIST, ISO 27001, and MITRE ATT&CK. Secure containerized environments by implementing best practices for Docker, Kubernetes, and cloud-native security solutions, including runtime protection and supply chain security. Enhance API security by enforcing OWASP API Security Top 10 best practices, securing REST APIs against unauthorized access, injection attacks, and data exfiltration. Oversee mobile device security through MDM solutions, ensuring compliance with enterprise security policies and mitigating threats to corporate mobile endpoints. Implement and fine-tune intrusion detection and prevention systems (IDS/IPS), ensuring continuous network traffic analysis and proactive threat hunting. Ensure secure data transfer, storage, and encryption practices across hybrid cloud and on-prem environments, utilizing cryptographic protocols and key management solutions. Lead security governance initiatives, ensuring compliance with ISO 27001, NIST, SOC 2, and industry-specific regulatory requirements while maintaining adherence to business continuity, privacy, and risk management policies. Standardize security measures across offshore and international teams, providing technical training, security awareness programs, and regional threat intelligence analysis. Key Performance Indicators (KPIs) Reduction in security incidents and breaches. High accuracy in vulnerability detection and remediation. Efficient incident response and resolution times. Compliance & Governance Adhere to and enforce policies related to QHSE (Quality, Health, Safety & Environment), Business Continuity, Information Security, Privacy, Risk, Compliance, and Governance. Qualifications Qualifications & Experience Education: Bachelor’s degree in computer science, Information Security, or a related field (master’s degree preferred). Experience: Minimum 8+ years in security engineering roles. Technical Skills Expertise in EDR, NDR, PAM, SIEM (Splunk), MDM, and endpoint security solutions. Strong knowledge of risk management, vulnerability management, and secure software development. Experience with security operations tools, including IDS, SIEM, and log collection. Security automation and SOAR – Experience with SOAR platforms to automate response workflows. Secure architecture and hardening – Strong grasp of Zero Trust, CIS Benchmarks, and security frameworks. Mobile Device Management (MDM) – Experience in configuring, securing, and managing mobile devices, including policy enforcement and threat protection. Container and Kubernetes security – Understanding of Docker, Kubernetes, and container security practices. API security – Experience securing REST APIs against common attacks Compliance and regulatory knowledge – Awareness of ISO 27001, NIST, SOC 2, and industry-specific security regulations. VAPT skills – Hands-on experience with Nessus, Kali Linux, and other penetration testing tools. Vulnerability revalidation – Ability to verify, assess, and remediate identified vulnerabilities. #J-18808-Ljbffr