Endpoint & Cloud Security Responsibilities

• Develop and enforce endpoint security policies and procedures.

• Guide IT/network teams on security best practices.

• Implement and manage endpoint protection against malware/ransomware.

Lead end‑to‑end security projects (design implementation testing- documentation).

• Design, troubleshoot, and implement Microsoft 365 & Azure security/compliance solutions.

• Build Microsoft 365 security/compliance integrations.

• Conduct PoC testing for new security technologies.

• Design and implement DLP (Microsoft Purview) and encryption for cloud/on‑prem data.

• Work with GRC teams to resolve audit findings and implement remediation.

Infrastructure Security Assessment

• Database security reviews for SQL Server, Oracle, PostgreSQL, MySQL, MongoDB.

• Web/app server security for IIS, Apache Tomcat, JBoss.

• Assess servers, networks, databases, middleware, virtualization, cloud environments.

• Review configurations against CIS Benchmarks, NIST, vendor standards.

• IAM experience: AD, LDAP, RBAC, PAM, authentication, identity lifecycle.

• Regulatory compliance: GDPR, UAE PDPL, CBUAE, PCI DSS, ISO 27001, ISR.

Container Security Assessment

• Assess Docker, Podman, CRI‑O, Kubernetes, OpenShift for vulnerabilities & misconfigurations.

• Harden container images (minimal base images, signature validation, trusted registries).

• Review Kubernetes manifests, Helm charts, RBAC, admission controls, network policies.

• Evaluate API access controls, service accounts, secrets management.

• Assess Kubernetes network policies, segmentation, Istio/Linkerd service mesh security.

• Review TLS/mTLS for pod/service communications.

• Secure CI/CD supply chain (Trivy, Anchore, Clair, SBOM validation).

• Runtime monitoring using Falco, Aqua, Prisma Cloud, Sysdig.

CI/CD Automation Security Assessment

• Assess Jenkins, GitLab CI/CD, GitHub Actions for vulnerabilities & misconfigurations.

• Secure build/deployment processes and artifact integrity.

• Enforce SAST, DAST, SCA, secrets scanning, container scanning via quality gates.

• Evaluate integrations with cloud services, repos, registries, container platforms.

• Assess software supply chain risks (dependency confusion, tampering).

• Integrate CI/CD logs with SIEM; ensure forensic readiness.

Cloud Security Assessments

• Security assessments across Azure, AWS, GCP, OCI.

• Review cloud security architecture (networking, segmentation, identity, RBAC, conditional access).

• Evaluate CASB controls for visibility, governance, data protection, threat management.

• Assess cloud posture using CSPM tools (e.g., Wiz).

• Assess SaaS posture via SSPM platforms.

• Evaluate cloud data protection using Microsoft Purview (classification, encryption, DLP).

AI Security Architecture Assessment

Assess AI/ML lifecycle security (data model deployment operation

• retirement).

• Review secure AI architecture (trust boundaries, segmentation, identity, API security, encryption, logging).

• Apply AI risk/governance frameworks to define controls and assurance activities.

Project Management

• Plan and execute security projects (scope, deliverables, timelines, resources).

• Communicate with technical teams, business owners, vendors, senior stakeholders.

• Manage risks, issues, dependencies, change requests.

• Coordinate vendors and ensure contractual deliverables.

Security Certifications

• SC‑401 (Microsoft Information Security Administrator)

• SC‑900 (Microsoft Security, Compliance & Identity Fundamentals)

• CISSP

• CCSK

Qualification Criteria

("Security Architect" OR "Cloud Security" OR "Infrastructure Security") AND "Endpoint security" AND ("Azure" OR "AWS" OR "GCP" OR "OCI") AND ("Kubernetes" OR "OpenShift" OR "Docker") AND ("CI/CD" OR "Jenkins") AND ("IAM" OR "RBAC" OR "PAM") AND "AI/ML security"

Skills: Endpoint protection uplift