Senior Information Security (InfoSec) Engineer
Lebanon Full-Time Engineering
Senior Information Security (InfoSec) Engineer We are currently seeking an experienced Security Specialist to join our team. This role will focus on securing our AWS cloud infrastructure, configuring and maintaining Web Application Firewalls (WAFs), and ensuring the overall security posture of our systems. The ideal candidate will have a strong background in AWS security best practices and a passion for implementing robust security measures within a cloud environment.
Responsibilities:
AWS Cloud Security Implementation: Design, implement, and maintain security measures for our AWS cloud infrastructure, including securing virtual networks, configuring access controls, and implementing encryption protocols. Web Application Firewall (WAF) Configuration: Deploy, configure, and manage Web Application Firewalls (WAFs) within AWS to protect web applications from common threats such as SQL injection, cross-site scripting (XSS), and other OWASP Top 10 vulnerabilities. Security Automation: Develop and maintain automated security processes and tools within the AWS environment. This includes building and maintaining CI/CD pipelines for security testing and deployment. Kubernetes: advanced Kubernetes security functionalities, focusing on network policies, RBAC implementation, and other advanced security features. This includes leveraging Kubernetes-native tools for enhanced security within AWS environments, ensuring robust protection for containerized workloads. Threat Monitoring and Incident Response: Monitor cloud environments for security threats and vulnerabilities, and respond promptly to security incidents. Develop and maintain incident response procedures to minimize the impact of security breaches. Compliance and Risk Management: Ensure compliance with industry standards and regulatory requirements related to AWS cloud security, such as GDPR, HIPAA, and PCI DSS. Conduct regular risk assessments and implement mitigation strategies as needed. Security Auditing and Documentation: Conduct regular security audits of our infrastructure and applications to identify and address security weaknesses. Maintain comprehensive documentation of security configurations, policies, and procedures.
Requirements
Bachelor's degree in Computer Science, Information Security, or related field. 3+ years of experience in DevOps or cloud security roles. In-depth knowledge of AWS services and security best practices, including IAM, VPC, Security Groups, and CloudTrail. Familiarity with Kubernetes and experience in implementing advanced Kubernetes security functionalities. Hands-on experience with configuring and managing Web Application Firewalls (WAFs) is preferred. Familiarity with AWS security certifications such as AWS Certified Security - Specialty is preferred. Excellent communication skills and ability to work effectively in a team environment.
Nice to Have
Certifications (SANS/GIAC, OSCP/OSWA/OSWE)
About Anghami
We’re a homemade startup with international swagger and over 120 million registered users. Based in Abu Dhabi with offices in UAE, Lebanon, Egypt and the Kingdom of Saudi Arabia We're the first Arab tech company to be listed on the New York Nasdaq stock exchange. We are the largest music and audio streaming platform in MENA We pride ourselves in our Users and our Product. We work hard every day to understand the needs and aspiration of our users. We believe that music is ambivalent: It is as social as it is personal.* And so we aim at providing users with all the tools and features that grant them the full freedom to explore, share and connect through music.
