We are seeking an experienced Cyber Security Engineering Lead to drive the design, implementation, and continuous improvement of Nawy's security architecture and technical security controls. This role is responsible for building and managing the organization's security technology stack across cloud and on-premises environments while ensuring secure-by-design principles are embedded throughout the business. The Security Engineering Lead will own the deployment and operation of key security Technologies, including SASE, EDR, firewalls, WAF, vulnerability management solutions, identity and access management controls, and cloud security capabilities. The role will work closely with Infrastructure, Product Engineering, Data, and Security Operations teams to enhance the organization's security posture and resilience.
Responsibilities
- Define and maintain the organization's security architecture roadmap across cloud and
- on-premises environments.
- Lead the evaluation, implementation, and management of security technologies
- including SASE, EDR, WAF, firewalls, vulnerability management, and identity security
- solutions.
- Develop and maintain security standards, baselines, and hardening guidelines for
- infrastructure, endpoints, applications, and cloud platforms.
- Lead technical security reviews and architecture assessments for new projects,
- products, and infrastructure changes.
- Drive secure-by-design and security-by-default practices throughout the technology
- lifecycle.
- Oversee vulnerability management processes and coordinate remediation activities
- with technology teams.
- Partner with engineering and infrastructure teams to implement security controls and
- reduce organizational risk.
- Ensure centralized logging and security telemetry are integrated with monitoring and
- detection platforms.
- Conduct security assessments and support threat modeling activities for critical
- business initiatives.
- Manage relationships with security technology vendors and service providers.
- Contribute to incident investigations and provide technical expertise during major
- security incidents.
- Establish and monitor security engineering metrics to measure the effectiveness of
- implemented controls.
Requirements
- At least 6 years of experience in information security engineering, security architecture,
- or infrastructure security roles.
- Strong experience implementing and managing security technologies such as EDR,
- SASE, WAF, NGFW, IAM, and vulnerability management platforms.
- Experience securing cloud environments, particularly AWS and Google Cloud Platform
- (GCP).
- Strong understanding of network security, cloud security, endpoint security, and zero
- trust architectures.
- Familiarity with security frameworks and standards including ISO 27001, NIST
- Cybersecurity Framework, and CIS Controls.
- Experience performing security architecture reviews and technical risk assessments.
- Relevant certifications such as CISSP, CCSP, AWS Security Specialty, AZ-500, GIAC, or
- equivalent are preferred.
- Familiarity with cybersecurity, risk, and data protection regulations in Egypt, including
- FRA requirements, and relevant DIFC regulatory frameworks.
- University/college degree in a relevant professional field.
- Excellent communication skills in English, both written and spoken.