Information Security Systems Engineer

Date Posted: 02 November, 2026

Industry: IT Services and IT Consulting

Location: VAPORVM IT SERVICES DMCC

Job Description:

The Information Security Systems Engineer is responsible for the day-to-day engineering, administration, and continuous improvement of the organization’s core security platforms. This role owns the technical implementation and tuning of Microsoft 365 E5 security workloads, data loss prevention, privileged access management, web application firewall, and Zero Trust access controls, and provides hands-on security analysis and threat detection support. The role is the technical backbone of the security function, translating security policy and strategy into working, well-tuned controls.

Key Responsibilities

• Administer and tune the Microsoft 365 E5 security stack: Defender (Endpoint, Office 365, Identity, Cloud Apps), Purview (DLP, Information Protection, Insider Risk), and Entra ID (Conditional Access, Identity Protection, PIM).
• Maintain secure configuration baselines across Exchange Online, SharePoint, Teams, and OneDrive.
• Monitor and respond to alerts in Defender XDR and Sentinel, including threat hunting and tuning.
• Design, deploy, and tune DLP policies across endpoint, email, cloud apps, and on-premises repositories, and maintain data classification and sensitivity labeling in partnership with business stakeholders.
• Investigate DLP incidents and report on data exfiltration risk trends.
• Administer the PAM platform (e.g., CyberArk, Delinia): vaulting, session isolation, credential rotation, and just-in-time access; onboard privileged accounts and support periodic access reviews and certification.
• Administer and tune WAF policies (e.g., Imperva, beyond trust, Arcon,) to protect web applications and APIs from OWASP Top 10 threats; onboard applications and analyze blocked/allowed traffic for false positives and emerging attack patterns.
• Support firewall rule management, network segmentation, and secure remote access.
• Implement and maintain Conditional Access policies, device compliance, and continuous access evaluation as part of the organization’s Zero Trust posture.
• Support SASE/proxy platforms (e.g., Netscope, Zscaler, Cato) for user and application access control, and manage MFA, identity governance, and access certification workflows.
• Perform day-to-day monitoring, log analysis, and triage of alerts across SIEM and native security tooling; analyze suspicious activity, phishing reports, and endpoint detections, escalating confirmed incidents per the incident response process.
• Support vulnerability scanning, patch validation, and remediation tracking.
• Document security architecture, configurations, and SOPs for all managed platforms.
• Automate repetitive security operations tasks using scripting (PowerShell, KQL, Python).
• Support audit evidence collection and technical remediation for ISO 27001 and other compliance requirements.

Required Qualifications

• Bachelor’s degree in information technology, Computer Science, Cybersecurity, or a related field.
• 4-7 years of hands-on experience in information security engineering or security operations.
• Demonstrated hands-on experience administering Microsoft 365 E5 security workloads (Defender suite, Purview, Entra ID).
• Practical experience with DLP, PAM, and WAF platforms in a production enterprise environment.
• Working knowledge of Zero Trust principles and Conditional Access implementation.
• Familiarity with SIEM platforms, log analysis, and security incident triage.
• Scripting/automation experience (PowerShell, KQL, Python) is a strong advantage.

Preferred Certifications

• Microsoft Certified: Security Operations Analyst Associate (SC-200)
• Microsoft Certified: Identity and Access Administrator Associate (SC-300)
• Microsoft Certified: Information Protection and Compliance Administrator Associate (SC-400)
• CompTIA Security+ or equivalent foundational security certification
• Vendor certifications for PAM/WAF platforms in use (e.g., CyberArk, Imperva), advantageous
• CEH or GIAC certifications, advantageous

Key Skills and Competencies

• Strong technical troubleshooting and analytical skills, with attention to detail in policy/rule tuning.
• Ability to work independently on complex technical configurations while following change management processes.
• Clear technical documentation and reporting skills.
• Collaborative mindset for working across IT infrastructure, application, and business teams.
• Ability to prioritize and respond effectively during active security incident