{"id":3672143,"url":"https://alion.io/job/erad-cybersecurity-engineer-cloud-it-remote-2","title":"Cybersecurity Engineer (Cloud & IT) - Remote","company":{"id":3778568,"name":"erad","domain":"erad.co","url":"https://alion.io/company/erad-2","size_band":"11-50","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Work at a Startup","truth_index":null},"role":"Security","role_family":"Security","seniority":"middle","employment_type":"full_time","work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"posting_text","remote_working_hours":null,"hiring_geo_confidence":"inferred","locations":[],"countries":[],"hiring_countries":["AE"],"hiring_countries_total":1,"salary":{"min":2500,"max":null,"currency":"USD","period":"month","gross":null,"usd_annual":30000},"salary_estimate":null,"experience_years_min":3,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Bash","optional":false},{"name":"DNS","optional":false},{"name":"IAM","optional":false},{"name":"ISO 27001","optional":false},{"name":"Linux","optional":false},{"name":"OWASP Top 10","optional":false},{"name":"Python","optional":false},{"name":"SOC 2","optional":false},{"name":"Zero Trust","optional":false},{"name":"CI/CD","optional":true}],"status":"live","first_seen_at":"2026-11-03T09:35:37Z","employer_posted_date":"2026-11-03","last_verified_at":"2026-11-07T11:53:30Z","board_verified":true,"closed_at":null,"days_open":4,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":4},"description":"About the Role\nerad is a Sharia-compliant fintech providing SME financing in Saudi Arabia and the UAE, licensed by the CMA in KSA and the DFSA in the UAE. We are hiring a Cybersecurity Engineer to own the security of our platform, our people and our devices. You will report to the CTO and work with a fully distributed engineering team that ships with AI-assisted tooling every day. We especially want to hear from penetration testers and security auditors who are ready to move from finding the issues to owning the fixes.\nWhat You'll Do\nSecurity engineering and testing\nOwn the security posture of our cloud environment: identity and access, network exposure, host hardening and patching, secrets, and logging coverage.\nTest our own products the way an attacker would: regular internal pentests of our web apps and APIs, plus scoping and retests with external testers.\nBuild and run vulnerability management across code, dependencies, hosts and third-party software, with remediation SLAs tracked to closure.\nReview designs and pull requests with engineers, and build security into our delivery pipeline.\nDetection and response\nOwn security alerting and keep it useful rather than noisy.\nLead incident response end to end: triage, containment, investigation, root cause and the write-up for management and regulators.\nRun phishing awareness, tabletop exercises and restore tests.\nGovernance and compliance\nRun our ISMS: control evidence, risk register, policies, vendor security reviews, access reviews and audit support.\nTurn regulatory requirements (CMA, DFSA, and KSA and UAE data protection law) into practical controls and evidence.\nIT (around 20% of your time)\nRun joiner, mover and leaver access: accounts, SSO, app roles, offboarding and data handover.\nManage company laptops through MDM: enrolment, configuration, encryption and app deployment.\nAdminister our identity and collaboration tools, the company password manager and MFA.\nAutomate the repetitive parts so IT stays a small slice of the job.\nQualifications & Experience\n3+ years in security, ideally including time as a penetration tester or security auditor at a pentest firm, security consultancy or compliance platform.\nHands-on web application, API and cloud penetration testing: you can find and exploit real vulnerabilities, write them up clearly, and work with engineers on the fix.\nPractical security experience on at least one major cloud provider: IAM, network controls and logging.\nExperience with WAF and zero-trust access tooling.\nStrong Linux and networking fundamentals: SSH, TLS, DNS, firewalls and VPNs.\nComfortable writing automation in Python or Bash, and reviewing application code for security issues (OWASP Top 10).\nIncident response experience, including investigating from raw logs.\nFamiliarity with ISO 27001 or SOC 2 controls and producing audit evidence.\nSome experience administering an identity provider and managing devices with an MDM.\nUses AI tools to work faster and checks their output critically.\nFluent English, written and spoken.\nSkills (Nice-to-Haves)\nExperience in fintech, banking or other regulated financial services, ideally with GCC regulators.\nCertifications such as OSCP, OSWE, CREST, CISSP, CCSP, a cloud provider security certification, or ISO 27001 Lead Implementer or Lead Auditor.\nContainer security, infrastructure as code and CI/CD security.\nKnowledge of the Saudi and UAE personal data protection laws.\nRed-team experience, published CVEs, bug bounty findings or CTF results.\nExperience as the first or only security engineer at a startup.\nArabic is a plus.","description_format":"text","description_chars":3582,"description_truncated":false,"requirements":{"experience_years_min":3,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[{"language":"English","level":"Advanced (C1)","optional":false}]},"benefits":[],"hiring_locations":[{"name":"United Arab Emirates","iso":"AE","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Cybersecurity","Information Security","Financial Services","Factoring & Trade Finance"],"lifecycle":[{"event":"open","at":"2026-11-03T09:35:37Z"}],"visa":[],"liveness":{"score":81,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.86,"p_room":0.945,"age_days":3,"expected_fill_days":7,"reasons":["conf:1","win:mid"],"computed_at":"2026-11-07T05:47:08Z"},"pay":{"stated_usd_annual":30000,"is_top_pay":false},"html_url":"https://alion.io/job/erad-cybersecurity-engineer-cloud-it-remote-2","json_url":"https://alion.io/job/erad-cybersecurity-engineer-cloud-it-remote-2.json","meta":{"generated_at":"2026-11-07T15:39:07Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":21376,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-08T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":3778568},"rest":"https://alion.io/mcp/rest/get_company?id=3778568"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Ferad-cybersecurity-engineer-cloud-it-remote-2"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Ferad-cybersecurity-engineer-cloud-it-remote-2"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Ferad-cybersecurity-engineer-cloud-it-remote-2"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/erad-cybersecurity-engineer-cloud-it-remote-2\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Ferad-cybersecurity-engineer-cloud-it-remote-2"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3672143}},{"tool":"search_jobs","arguments":{"company":"erad.co","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3672143},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}