We are seeking a hands-on Cybersecurity Engineer to deploy, manage, and optimise Privileged Access Management (PAM), Data Loss Prevention (DLP), and Email Security solutions. The role will focus on FortiPAM, FortiDLP, and FortiMail, protecting privileged accounts, sensitive data, and email infrastructure across hybrid environments.
- Deploy, configure, and support FortiPAM, FortiDLP, and FortiMail solutions.
- Manage privileged accounts, credential vaulting, password rotation, RBAC, MFA, session recording, and just-in-time access.
- Configure DLP policies to protect sensitive data across endpoints, email, web, cloud applications, USB, print, and clipboard channels.
- Develop data classification, regex, fingerprinting, and exact-data-match rules; investigate and tune DLP alerts.
- Administer FortiMail for Microsoft 365 and hybrid Exchange environments.
- Configure and maintain SPF, DKIM, DMARC, anti-spam, anti-phishing, anti-malware, impersonation, and BEC protection policies.
- Troubleshoot authentication, mail flow, endpoint, policy, and integration issues.
- Integrate security platforms with AD/Entra ID, LDAP, RADIUS, SAML/SSO, SIEM, SOC, and Microsoft 365.
- Maintain security documentation, SOPs, audit logs, reports, and disaster-recovery procedures.
- Work closely with Network, Infrastructure, SOC, Compliance, and Application teams.
Requirements
- Bachelor’s degree in
IT, Cybersecurity, Computer Science, or related field.
- Minimum 3–5 years of
hands-on experience in enterprise cybersecurity operations.
- Experience with at least
two of the following: FortiPAM/CyberArk/BeyondTrust/Delinea;
FortiDLP/Microsoft Purview/Forcepoint/Symantec DLP;
FortiMail/Proofpoint/Mimecast/Defender for Office 365.
- Strong knowledge of PAM,
DLP, email security, Microsoft 365, hybrid Exchange, and identity integrations.
- Sound understanding of SPF,
DKIM, DMARC, MTA-STS, SMTP, TLS, and email-routing concepts.
- Experience with SIEM
monitoring, log analysis, incident investigation, and policy tuning.
- Knowledge of TCP/IP, DNS,
firewalls, AD, Entra ID, LDAP, RADIUS, and SAML/SSO.
- PowerShell, Python, or Bash
scripting experience is an advantage.
Preferred Certifications
· Fortinet NSE 4/5/6/7 or
Fortinet specialist certifications.
· Security+, CySA+, CEH,
CISSP, or CISM.
· Exposure to ISO 27001, ISO
27701, healthcare, finance, telecom, or other regulated environments.
Skills Required
- Bachelor's degree in IT, Cybersecurity, Computer Science, or a related field
- 3-5 years of hands-on experience in enterprise cybersecurity operations
- Experience with at least two PAM, DLP, or email security platforms listed in the description
- Strong knowledge of PAM, DLP, email security, Microsoft 365, hybrid Exchange, and identity integrations
- Understanding of SPF, DKIM, DMARC, MTA-STS, SMTP, TLS, and email-routing concepts
- Experience with SIEM monitoring, log analysis, incident investigation, and policy tuning
- Knowledge of TCP/IP, DNS, firewalls, Active Directory, Entra ID, LDAP, RADIUS, and SAML/SSO
- PowerShell, Python, or Bash scripting experience
- Fortinet NSE 4/5/6/7 or Fortinet specialist certification
- Security+, CySA+, CEH, CISSP, or CISM certification
- Exposure to ISO 27001, ISO 27701, healthcare, finance, telecom, or other regulated environments
What We Do
TalentOne is a UAE-based recruitment and staffing partner and a PureHealth asset. It connects skilled professionals with businesses and provides customized workforce solutions, including recruiting, payroll and administrative support, medical licensing, PRO services, and call-center/customer-service staffing. The company uses technology, AI, data analysis, and industry knowledge to make hiring efficient while helping employers build teams and candidates advance their careers.
