وظائف مفتش أمن في مصر

Role Overview We are looking for a Cybersecurity Engineer who can review eyouth systems end-to-end across code,infrastructure, CI/CD, AWS, authentication, authorization, data privacy, and production deployment practices. This role should have enough technical depth to understand our current engineering stack and reviewbackend, frontend, mobile, AI, and cloud systems before and after release.<br>Key Responsibilities• Perform secure code reviews across backend, frontend, dashboard, mobile, and AI-related systems.• Review Django/DRF APIs, serializers, permission classes, authentication, authorization, and sensitiveadmin workflows.• Review CI/CD pipelines for insecure deployment steps, exposed secrets, missing security gates, andweak access control.• Review AWS infrastructure, including S3, Cloud Front, IAM, RDS/Postgre SQL, Redis/Elasti Cache,ALB/security groups, and environment configuration.• Review file upload and download flows, signed URLs, public/private media access, and data leakagerisks.• Review JWT/session handling, password reset, role-based permissions, single-session enforcement, andadmin-level actions.• Review frontend and mobile security, including token storage, XSS risks, API interceptors, route guards,and secure client behavior.• Review AI-related risks, including prompt injection, PII leakage, unsafe prompt construction, and third-party AI data sharing.• Conduct vulnerability assessments and pre-release security audits.• Create security checklists for code review, deployment review, and production readiness.• Document findings with severity, impact, evidence, and recommended remediation steps.<br>Requirements & Qualifications• 3+ years of experience in Application Security, Cloud Security, Cybersecurity Engineering, or Security-focused Software Engineering.• Strong experience in secure code review, API security, and common web vulnerabilities.• Good understanding of OWASP Top 10, authentication, authorization, and session security.• Experience reviewing CI/CD pipelines and deployment workflows.• Hands-on experience with AWS security services including IAM, S3, Cloud Front, RDS/Postgre SQL, Redis/Elasti Cache, ALB, and Security Groups.• Good understanding of backend technologies, especially Python, Django, and Django REST Framework.• Good understanding of frontend and mobile security risks.• Experience with Git workflows, pull request reviews, and collaboration with engineering teams.• Ability to identify security issues and provide practical engineering solutions. Preferred Technical Stack Awareness:• Python, Django, Django REST Framework, Channels, Celery, Redis, Postgre SQL, and Simple JWT.• React/Vite applications using React Query, Zustand, axios, Tailwind, and localization.• Flutter applications using BLoC, Dio, GoRouter, Firebase Messaging, and local token storage.• AWS infrastructure and environment-based configurations.• Firebase Admin SDK, SMTP, Open AI APIs, file upload workflows, and PII-heavy systems.<br>Work Conditions & Benefits• Hybrid work model• 2 days off weekly• Medical insurance• Working hours from 9:00 AM to 5:00 PMHow to apply Please send your resume to career@eyouth.learning.com and mention the job title in the email subject.

Role Overview We are looking for a Cybersecurity Engineer who can review eyouth systems end-to-end across code,infrastructure, CI/CD, AWS, authentication, authorization, data privacy, and production deployment practices. This role should have enough technical depth to understand our current engineering stack and reviewbackend, frontend, mobile, AI, and cloud systems before and after release.<br>Key Responsibilities• Perform secure code reviews across backend, frontend, dashboard, mobile, and AI-related systems.• Review Django/DRF APIs, serializers, permission classes, authentication, authorization, and sensitiveadmin workflows.• Review CI/CD pipelines for insecure deployment steps, exposed secrets, missing security gates, andweak access control.• Review AWS infrastructure, including S3, Cloud Front, IAM, RDS/Postgre SQL, Redis/Elasti Cache,ALB/security groups, and environment configuration.• Review file upload and download flows, signed URLs, public/private media access, and data leakagerisks.• Review JWT/session handling, password reset, role-based permissions, single-session enforcement, andadmin-level actions.• Review frontend and mobile security, including token storage, XSS risks, API interceptors, route guards,and secure client behavior.• Review AI-related risks, including prompt injection, PII leakage, unsafe prompt construction, and third-party AI data sharing.• Conduct vulnerability assessments and pre-release security audits.• Create security checklists for code review, deployment review, and production readiness.• Document findings with severity, impact, evidence, and recommended remediation steps.<br>Requirements & Qualifications• 3+ years of experience in Application Security, Cloud Security, Cybersecurity Engineering, or Security-focused Software Engineering.• Strong experience in secure code review, API security, and common web vulnerabilities.• Good understanding of OWASP Top 10, authentication, authorization, and session security.• Experience reviewing CI/CD pipelines and deployment workflows.• Hands-on experience with AWS security services including IAM, S3, Cloud Front, RDS/Postgre SQL, Redis/Elasti Cache, ALB, and Security Groups.• Good understanding of backend technologies, especially Python, Django, and Django REST Framework.• Good understanding of frontend and mobile security risks.• Experience with Git workflows, pull request reviews, and collaboration with engineering teams.• Ability to identify security issues and provide practical engineering solutions. Preferred Technical Stack Awareness:• Python, Django, Django REST Framework, Channels, Celery, Redis, Postgre SQL, and Simple JWT.• React/Vite applications using React Query, Zustand, axios, Tailwind, and localization.• Flutter applications using BLoC, Dio, GoRouter, Firebase Messaging, and local token storage.• AWS infrastructure and environment-based configurations.• Firebase Admin SDK, SMTP, Open AI APIs, file upload workflows, and PII-heavy systems.<br>Work Conditions & Benefits• Hybrid work model• 2 days off weekly• Medical insurance• Working hours from 9:00 AM to 5:00 PM<br>How to apply Please send your resume to career@eyouth.learning.com and mention the job title in the email subject.

Role Overview We are looking for a Cybersecurity Engineer who can review eyouth systems end-to-end across code,infrastructure, CI/CD, AWS, authentication, authorization, data privacy, and production deployment practices. This role should have enough technical depth to understand our current engineering stack and reviewbackend, frontend, mobile, AI, and cloud systems before and after release.<br>Key Responsibilities• Perform secure code reviews across backend, frontend, dashboard, mobile, and AI-related systems.• Review Django/DRF APIs, serializers, permission classes, authentication, authorization, and sensitiveadmin workflows.• Review CI/CD pipelines for insecure deployment steps, exposed secrets, missing security gates, andweak access control.• Review AWS infrastructure, including S3, Cloud Front, IAM, RDS/Postgre SQL, Redis/Elasti Cache,ALB/security groups, and environment configuration.• Review file upload and download flows, signed URLs, public/private media access, and data leakagerisks.• Review JWT/session handling, password reset, role-based permissions, single-session enforcement, andadmin-level actions.• Review frontend and mobile security, including token storage, XSS risks, API interceptors, route guards,and secure client behavior.• Review AI-related risks, including prompt injection, PII leakage, unsafe prompt construction, and third-party AI data sharing.• Conduct vulnerability assessments and pre-release security audits.• Create security checklists for code review, deployment review, and production readiness.• Document findings with severity, impact, evidence, and recommended remediation steps.<br>Requirements & Qualifications• 3+ years of experience in Application Security, Cloud Security, Cybersecurity Engineering, or Security-focused Software Engineering.• Strong experience in secure code review, API security, and common web vulnerabilities.• Good understanding of OWASP Top 10, authentication, authorization, and session security.• Experience reviewing CI/CD pipelines and deployment workflows.• Hands-on experience with AWS security services including IAM, S3, Cloud Front, RDS/Postgre SQL, Redis/Elasti Cache, ALB, and Security Groups.• Good understanding of backend technologies, especially Python, Django, and Django REST Framework.• Good understanding of frontend and mobile security risks.• Experience with Git workflows, pull request reviews, and collaboration with engineering teams.• Ability to identify security issues and provide practical engineering solutions. Preferred Technical Stack Awareness:• Python, Django, Django REST Framework, Channels, Celery, Redis, Postgre SQL, and Simple JWT.• React/Vite applications using React Query, Zustand, axios, Tailwind, and localization.• Flutter applications using BLoC, Dio, GoRouter, Firebase Messaging, and local token storage.• AWS infrastructure and environment-based configurations.• Firebase Admin SDK, SMTP, Open AI APIs, file upload workflows, and PII-heavy systems.<br>Work Conditions & Benefits• Hybrid work model• 2 days off weekly• Medical insurance• Working hours from 9:00 AM to 5:00 PM<br>How to apply Please send your resume to career@eyouth.learning.com and mention the job title in the email subject.

Role Overview We are looking for a Cybersecurity Engineer who can review eyouth systems end-to-end across code,infrastructure, CI/CD, AWS, authentication, authorization, data privacy, and production deployment practices. This role should have enough technical depth to understand our current engineering stack and reviewbackend, frontend, mobile, AI, and cloud systems before and after release.<br>Key Responsibilities• Perform secure code reviews across backend, frontend, dashboard, mobile, and AI-related systems.• Review Django/DRF APIs, serializers, permission classes, authentication, authorization, and sensitiveadmin workflows.• Review CI/CD pipelines for insecure deployment steps, exposed secrets, missing security gates, andweak access control.• Review AWS infrastructure, including S3, Cloud Front, IAM, RDS/Postgre SQL, Redis/Elasti Cache,ALB/security groups, and environment configuration.• Review file upload and download flows, signed URLs, public/private media access, and data leakagerisks.• Review JWT/session handling, password reset, role-based permissions, single-session enforcement, andadmin-level actions.• Review frontend and mobile security, including token storage, XSS risks, API interceptors, route guards,and secure client behavior.• Review AI-related risks, including prompt injection, PII leakage, unsafe prompt construction, and third-party AI data sharing.• Conduct vulnerability assessments and pre-release security audits.• Create security checklists for code review, deployment review, and production readiness.• Document findings with severity, impact, evidence, and recommended remediation steps.<br>Requirements & Qualifications• 3+ years of experience in Application Security, Cloud Security, Cybersecurity Engineering, or Security-focused Software Engineering.• Strong experience in secure code review, API security, and common web vulnerabilities.• Good understanding of OWASP Top 10, authentication, authorization, and session security.• Experience reviewing CI/CD pipelines and deployment workflows.• Hands-on experience with AWS security services including IAM, S3, Cloud Front, RDS/Postgre SQL, Redis/Elasti Cache, ALB, and Security Groups.• Good understanding of backend technologies, especially Python, Django, and Django REST Framework.• Good understanding of frontend and mobile security risks.• Experience with Git workflows, pull request reviews, and collaboration with engineering teams.• Ability to identify security issues and provide practical engineering solutions. Preferred Technical Stack Awareness:• Python, Django, Django REST Framework, Channels, Celery, Redis, Postgre SQL, and Simple JWT.• React/Vite applications using React Query, Zustand, axios, Tailwind, and localization.• Flutter applications using BLoC, Dio, GoRouter, Firebase Messaging, and local token storage.• AWS infrastructure and environment-based configurations.• Firebase Admin SDK, SMTP, Open AI APIs, file upload workflows, and PII-heavy systems.<br>Work Conditions & Benefits• Hybrid work model• 2 days off weekly• Medical insurance• Working hours from 9:00 AM to 5:00 PM<br>How to apply Please send your resume to career@eyouth.learning.com and mention the job title in the email subject.

Job Purpose The Information Security Manager – Egypt establishes, maintains, and continuously improves the information security and cybersecurity posture of Pay Tabs' Egyptian operations. The role exists for two complementary reasons:Regulatory necessity — to provide a designated, locally accountable security function that satisfies Central Bank of Egypt (CBE) cybersecurity and payment-sector oversight expectations, including local incident notification, reporting, and inspection readiness. Departmental support to the Group — to act as the local execution and assurance layer for the Group Information Security function, extending the reach of the Group Information Security Manager into the Egyptian entity by implementing Group policies, evidencing controls, managing local risk, and reporting upward.<br><br>Key Responsibilities Regulatory & Compliance (Egypt focus) Own cybersecurity regulatory compliance for Pay Tabs Egypt and ensure adherence to CBE cybersecurity regulations and the security/governance obligations applicable to payment service providers and payment system operators under the Central Bank and Banking System Law (Law No. 194 of 2020) and related CBE instructions. Maintain compliance with the Egyptian Personal Data Protection Law (Law No. 151 of 2020) in coordination with the Group privacy/DPO function. Prepare, maintain, and submit regulatory notifications and periodic reports to the CBE, including cyber incident notifications within mandated timelines. Coordinate and support CBE inspections, on-site reviews, external audits, and regulatory examinations managing evidence collection, response, and remediation tracking. Maintain a current mapping of local controls to CBE requirements and reconcile them against Group frameworks (ISO 27001, PCI DSS). Governance, Policy & Standards Localize and implement Group information security policies, procedures, and standards for the Egyptian entity, adapting them to Egyptian regulatory and legal requirements where needed. Maintain the local control documentation set (policies, procedures, standards, registers) with proper version control and governance approval. Provide local input, papers, and reporting to the Cyber Security Committee. Risk Management Identify, assess, and track information security and cyber risks specific to the Egyptian operation; maintain the local risk register and feed into the Group risk process (ISO 31000-aligned). Track Key Risk Indicators (KRIs) and residual risk for local assets and processes. Conduct and support third-party / supply chain security assessments for Egyptian vendors and service providers. Security Operations & Technical Assurance Oversee local implementation of technical and operational controls (identity and access management, vulnerability management, logging and monitoring, network and endpoint security) in coordination with IT and Group security. Coordinate vulnerability scanning, penetration testing, and remediation for in-scope Egyptian systems. Support PCI DSS scope maintenance, evidence collection, and assessment activities for the Egyptian environment. Incident Management Act as local incident coordinator; ensure cyber incidents are detected, triaged, escalated, and reported in line with the Group incident procedure and CBE notification requirements. Maintain local incident records, lead or contribute to post-incident reviews, and track corrective actions to closure. Awareness & Culture Deliver the Group security awareness program locally training, phishing simulations, and role-based awareness adapted to the Arabic/English needs of Egyptian staff. Reporting & Support to the GISMProvide regular, structured reporting to the Group Information Security Manager on local compliance status, risk posture, incidents, KRIs, and remediation progress. Support Group-wide initiatives, audits, and certifications as they apply to Egypt. Liaise with local IT, business, legal, HR, and internal audit functions on behalf of the security function<br>.<br>Required Qualifications & Experience Bachelor’s degree in computer science, Information Technology, Information Security, or a related field.7+ years of information security experience, with 3+ years in a financial services, fintech, payments, or otherwise regulated environment. Demonstrable knowledge of CBE cybersecurity regulatory requirements and the Egyptian payments/banking regulatory landscape. Working knowledge of PCI DSS, ISO 27001, and ISO 31000. Familiarity with Egypt Data Protection Law 151/2020. Experience supporting regulatory inspections and external audit<br>s.<br>Certifications (Preferred) ISO 27001 Lead Implementer / Lead Auditor. CISSP, CISM, or CRISC. A PCI-related qualification is an advanta<br>ge.<br>Skills & Competencies Strong grasp of regulatory compliance and audit management in a financial/payments context. Risk assessment and GRC capability. Technical breadth across core security domains. Excellent stakeholder management; able to operate effectively as a lean/sole local security resource. Fluent Arabic and English essential for regulator liaison and staff communication. Strong documentation, evidence-management, and reporting ski<br>lls.

Job Description: <br>· Develop, implement, and maintain information security policies, standards, and procedures.· As an Information Security Assessor (QSA), you will lead and support client engagements focused on evaluating security controls, validating compliance against regulatory frameworks, and providing structured, evidence-based reporting.· Conduct information security risk assessments and recommend mitigation plans.· Ensure compliance with security frameworks and regulatory requirements (PCI is Must)· Coordinate with internal teams and external auditors during PCI DSS audits and certification processes.· Hands-on experience with PCI DSS compliance and audit processes is Must· Responsible for protecting the organization's systems, networks, and data from cyber threats and security breaches by implementing effective security controls and ensuring compliance with security policies.· Perform Security Assessments: Lead and execute PCI DSS assessments, including scoping client environments, performing control validation, and producing required deliverables such as Reports on Compliance (ROC), Attestations of Compliance (AOC), and Self-Assessment Questionnaires (SAQ), as applicable.· Develop and maintain information security governance frameworks, policies, and procedures.· Develop Assessment Reports: Produce clear, structured reports that document compliance status, supporting evidence, and identified gaps in alignment with applicable regulatory requirements. Provide Advisory Support: Guide clients in preparation for assessments by assisting with scoping, identifying sensitive data flows, performing gap analyses, and outlining remediation actions. Support Technical Documentation: Contribute to or lead the development and review of policies and procedures to align with compliance requirements and industry standards. Assist in the development, implementation, and maintenance of GRC policies, standards, and procedures. Conduct risk assessments to identify, analyze, and evaluate potential risks and vulnerabilities across various business functions and IT systems. Collaborate with cross-functional teams to ensure alignment of GRC activities with business objectives. Requirements:· Bachelor’s degree in computer science, Information Technology, or a related field.· English Level Excellent to fluent is must (written and spoken).· 3+ years of experience in Information Security, Governance, Risk, and Compliance (GRC), or a similar role.· Strong documentation, analytical, and reporting skills.· Excellent communication and stakeholder management skills.· Strong knowledge of security standards and compliance frameworks, including PCI DSS, and other relevant regulations.· Practical experience with PCI DSS compliance, including gap assessments, audit preparation, evidence collection, and remediation activities.<br>Preferred Certifications PCI DSS Professional (PCIP)

Job Description: <br>· Develop, implement, and maintain information security policies, standards, and procedures.· As an Information Security Assessor (QSA), you will lead and support client engagements focused on evaluating security controls, validating compliance against regulatory frameworks, and providing structured, evidence-based reporting.· Conduct information security risk assessments and recommend mitigation plans.· Ensure compliance with security frameworks and regulatory requirements (PCI is Must)· Coordinate with internal teams and external auditors during PCI DSS audits and certification processes.· Hands-on experience with PCI DSS compliance and audit processes is Must· Responsible for protecting the organization's systems, networks, and data from cyber threats and security breaches by implementing effective security controls and ensuring compliance with security policies.· Perform Security Assessments: Lead and execute PCI DSS assessments, including scoping client environments, performing control validation, and producing required deliverables such as Reports on Compliance (ROC), Attestations of Compliance (AOC), and Self-Assessment Questionnaires (SAQ), as applicable.· Develop and maintain information security governance frameworks, policies, and procedures.· Develop Assessment Reports: Produce clear, structured reports that document compliance status, supporting evidence, and identified gaps in alignment with applicable regulatory requirements. Provide Advisory Support: Guide clients in preparation for assessments by assisting with scoping, identifying sensitive data flows, performing gap analyses, and outlining remediation actions. Support Technical Documentation: Contribute to or lead the development and review of policies and procedures to align with compliance requirements and industry standards. Assist in the development, implementation, and maintenance of GRC policies, standards, and procedures. Conduct risk assessments to identify, analyze, and evaluate potential risks and vulnerabilities across various business functions and IT systems. Collaborate with cross-functional teams to ensure alignment of GRC activities with business objectives. Requirements:· Bachelor’s degree in computer science, Information Technology, or a related field.· English Level Excellent to fluent is must (written and spoken).· 3+ years of experience in Information Security, Governance, Risk, and Compliance (GRC), or a similar role.· Strong documentation, analytical, and reporting skills.· Excellent communication and stakeholder management skills.· Strong knowledge of security standards and compliance frameworks, including PCI DSS, and other relevant regulations.· Practical experience with PCI DSS compliance, including gap assessments, audit preparation, evidence collection, and remediation activities.<br>Preferred Certifications PCI DSS Professional (PCIP)

Job Description: <br>· Develop, implement, and maintain information security policies, standards, and procedures.· As an Information Security Assessor (QSA), you will lead and support client engagements focused on evaluating security controls, validating compliance against regulatory frameworks, and providing structured, evidence-based reporting.· Conduct information security risk assessments and recommend mitigation plans.· Ensure compliance with security frameworks and regulatory requirements (PCI is Must)· Coordinate with internal teams and external auditors during PCI DSS audits and certification processes.· Hands-on experience with PCI DSS compliance and audit processes is Must· Responsible for protecting the organization's systems, networks, and data from cyber threats and security breaches by implementing effective security controls and ensuring compliance with security policies.· Perform Security Assessments: Lead and execute PCI DSS assessments, including scoping client environments, performing control validation, and producing required deliverables such as Reports on Compliance (ROC), Attestations of Compliance (AOC), and Self-Assessment Questionnaires (SAQ), as applicable.· Develop and maintain information security governance frameworks, policies, and procedures.· Develop Assessment Reports: Produce clear, structured reports that document compliance status, supporting evidence, and identified gaps in alignment with applicable regulatory requirements. Provide Advisory Support: Guide clients in preparation for assessments by assisting with scoping, identifying sensitive data flows, performing gap analyses, and outlining remediation actions. Support Technical Documentation: Contribute to or lead the development and review of policies and procedures to align with compliance requirements and industry standards. Assist in the development, implementation, and maintenance of GRC policies, standards, and procedures. Conduct risk assessments to identify, analyze, and evaluate potential risks and vulnerabilities across various business functions and IT systems. Collaborate with cross-functional teams to ensure alignment of GRC activities with business objectives. Requirements:· Bachelor’s degree in Computer Science, Information Technology, or a related field.· English Level Excellent to fluent is must (written and spoken).· 3+ years of experience in Information Security, Governance, Risk, and Compliance (GRC), or a similar role.· Strong documentation, analytical, and reporting skills.· Excellent communication and stakeholder management skills.· Strong knowledge of security standards and compliance frameworks, including PCI DSS, and other relevant regulations.·Practical experience with PCI DSS compliance, including gap assessments, audit preparation, evidence collection, and remediation activities.<br>Preferred Certifications PCI DSS Professional (PCIP)

The Security Analyst is responsible for protecting the organization’s digital assets by monitoring systems, identifying vulnerabilities, and addressing cyber threats. They ensure compliance with security standards, manage access controls, escalate incidents, enforce policies, and provide training to maintain a secure and resilient IT environment.<br><br>Main Tasks Duties include, but are not limited to the following<br>:Monitor security systems and tools, investigate anomalies, and respond to threats, vulnerabilities, and incidents. Conduct regular vulnerability assessments and penetration testing to identify weaknesses in infrastructure, applications, and processes. Manage identity and access management (IAM) processes, including role-based access controls (RBAC), provisioning, deprovisioning, and periodic reviews. Ensure compliance with security standards and regulations, supporting internal and third-party risk assessments and mitigation efforts. Proactively address cyber threats and escalate critical incidents to the Cybersecurity Manager with actionable recommendations for resolution. Develop, test, and maintain incident response plans to ensure readiness for cybersecurity breaches. Enforce cybersecurity policies, conduct training programs, and foster a culture of security awareness. Stay updated on cybersecurity trends, technologies, and best practices to enhance the organization’s security posture. Maintain detailed records of incidents, including root cause analysis, resolution steps, and lessons learned. Prepare periodic reports on security metrics, incidents, and system health for review by the Cybersecurity Manager and IT leadership<br>Education <br>Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, or a related field is typically required.<br>Experience<br>4+ years of experience in IT, of which 2 cybersecurity roles, such as a Security Analyst, IT Security Specialist, or similar position. Experience in manufacturing environment is a plus.<br>Languages<br>Proficient in English Proficient in Arabic

JOB PURPOSE:<br>Protect the payment platforms of Modupay, customer data and internal systems from any form of cyber-attacks by implementing security measures, detecting any gaps and reacting to any form of attacks.<br>KEY ACCOUNTABILITIES:<br>Develop, maintain, and enhance information security policies, standards, procedures, and secure configuration baselines. Plan, perform, and coordinate vulnerability assessments and penetration tests for internal, external, web, API, cloud, and mobile environments, and track remediation to closure. Execute security testing methodologies including reconnaissance, validation of findings, exploitation within approved scope, post-test reporting, and retesting of remediated issues. Develop, implement, and distribute incident response, escalation, and breach-handling procedures, and support investigations of security events. Monitor and analyze security alerts, threat intelligence, and attack trends, and communicate actionable risk information to technical and business stakeholders. Conduct control reviews to confirm adherence to security policies, operational procedures, and secure development and infrastructure practices. Support compliance with Egyptian data protection requirements, National Telecom Regulatory Authority cybersecurity obligations where applicable, PCI DSS, and relevant Central Bank of Egypt expectations for financial services. Work with IT, engineering, product, and third-party providers to remediate vulnerabilities, strengthen security architecture, and improve security posture across the environment.<br>KNOWLEDGE, SKILLS & COMPETENCIES:Education Background Bachelor’s degree in Computer Science or Information Systems or Engineering Competencies Strong understanding of computer science fundamentals, operating systems, networks, web technologies, databases, authentication, and common enterprise architectures. Hands-on capability to perform penetration testing and vulnerability assessments using recognized methodologies and secure reporting practices. Practical knowledge of web, API, network, cloud, Active Directory, and mobile security testing concepts, including validation of findings, risk rating, and remediation guidance. Experience with security operations concepts such as SIEM, DLP, EDR, incident response, threat hunting, perimeter defense, risk assessment, and security metrics. Strong understanding of adversary tactics, techniques, and procedures, threat modeling, kill chain analysis, and common attack paths used by cybercriminal and advanced threat actors. Ability to write clear technical reports and executive summaries, communicate risks effectively, and speak authoritatively to technical and non-technical audiences. Familiarity with the Egyptian cybersecurity and payments landscape, including digital banking, wallets, card environments, and local regulatory expectations. Relevant certifications preferred, such as OSCP, PNPT, e JPT, CEH Practical, GPEN, Security+, CySA+, or CISSP/SSCP, with at least one hands-on offensive security certification strongly preferred for roles performing penetration testing. Strong stakeholder management, ethics, discretion, and the ability to work within approved rules of engagement and documented authorization for testing activities. Language Skills Very Good in writing and reading English language Years of Experience2-3 Years Internal Stakeholders CISO, Product, Compliance, IT Operations, Legal, HRExternal Stakeholders External auditors, penetration testing vendors, regulators, payment partners, and relevant Egyptian authorities and industry bodies.

<h2 class="h5">Job description</h2> <div class="t-break" data-jb-field="description"> <span>Join EVA Pharma, a leading pharmaceutical company dedicated to empowering the fight for Health and well-being as a fundamental human right.<br> Recognized and certified as a best place to work, we are committed to fostering a supportive and innovative environment for our team members.<br> Job Summary We are seeking a passionate and talented Information &amp; Cyber Security Section Head to join our dynamic team.<br> The ideal candidate will contribute to our mission of enhancing human health and well-being, ensuring that we meet the highest standards of excellence in our industry.<br> Key Responsibilities: Develop and enforce information security policies, standards, and risk management frameworks aligned with ISO 27001, NIST, and global best practices.<br> Lead security for Oracle EBS, Microsoft 365, and cloud platforms, implementing IAM, encryption, endpoint, and network security controls.<br> Oversee SOC operations, threat monitoring, vulnerability assessments, penetration testing, and incident response management.<br> Ensure compliance with local and international regulations (Egyptian Data Protection Law, GDPR, GxP) and manage internal and external security audits.<br> Bachelor’s degree in Computer Science or related field (Master’s preferred).<br> 7+ years of IT security experience with 3+ years in a leadership role.<br> relevant certifications (CISSP, CISM, ISO 27001).<br> strong stakeholder management, and cybersecurity awareness leadership.<br></span> </div>

About noon <br>We’re building an ecosystem of digital products and services that power everyday life across the Middle East—fast, scalable, and deeply customer-centric. Our mission is to deliver to every door every day. We want to redefine what technology can do in this region, and we’re looking for a Cloud Security Engineer who can help us move even faster.noon’s mission: Every door, every day.<br>What you'll do:Team noon has some of the fastest, smartest, and hardest-working people we've encountered. With a young, aggressive, and talented team, we're driving major missions forward. Noon's Group Cybersecurity is looking for a Security Engineer, Cloud & Operations to join our Cloud Security team. This is a hands-on engineering role, you will build cloud-native detections that catch real attacker behavior in GCP, deploy preventive controls at org scale, and investigate the SOC alerts your own detections generate. You write the detection rule, you investigate the alert it fires, and you convert findings into durable controls or tooling that prevents recurrence. We hire engineers who build, not analysts who configure. Build and maintain cloud detection rules in SIEM and EDR including GCP-specific attack paths, and managing them through sandbox validation, retro hunts, false-positive elimination, and risk-scoring alignment. Design and deploy preventive WAF and cloud security controls Investigate security alerts and incidents from the SOC, determine root cause, support remediation with engineering teams, and reduce noise through systematic detection tuning and exemption strategies. Build and maintain internal cloud security tooling, security scanning pipelines, shipping cross-project services that scale across the group. Triage and tune EDR alerts, including detection policy adjustments, response workflow automation, playbook contributions, and endpoint investigation support. Build incident response automations based on established playbooks, including containment workflows, IR actions and isolation responses. Surface cloud security misconfiguration and work with engineering teams on IAM to right-size access without disruption. Partner with Dev Ops, IT, Product Security, and Offensive Security teams to operationalize cloud restrictions, onboard new environments, validate security controls, and provide evidence for compliance and audit requirements.<br>What you'll need:2 to 4 years of experience in cloud security, detection engineering, security operations, or software engineering with a security focus. Hands-on experience with GCP security fundamentals: IAM, org policies, service accounts, Cloud Storage, Cloud Build, Cloud Run, or equivalent depth on another major cloud provider. Practical experience writing or maintaining detection rules in a SIEM platform (Splunk, Google Sec Ops, or similar), including rule authoring, testing, and false-positive management. Ability to investigate security alerts end-to-end: from initial triage through root-cause analysis, evidence collection, and supporting remediation efforts with relevant teams. Familiarity with at least one EDR platform (Crowd Strike Falcon or similar), including alert triage and basic detection tuning. Clear communication skills with the ability to document findings, write incident reports, and coordinate with cross-functional teams without requiring executive escalation. Comfortable working across multiple environments (production, staging, sandbox) and geographies with structured processes and attention to operational impact. Software engineering background preferred - production-quality coding capability in Python, Go, or similar. We want someone who builds tools and services. Experience in product-first, consumer internet, e-commerce, fintech, or marketplace environments - preferred<br>Who will excel? We’re looking for people with high standards, who understand that hard work matters. You need to be relentlessly resourceful and operate with a deep bias for action. We need people with the courage to be fiercely original.noon is not for everyone; readiness to adapt, pivot, and learn is essential.

<h2 class="h5">وصف الوظيفة</h2> <div class="t-break" data-jb-field="description"> <span>نحن نبحث عن مهندس أمان شبكات أول ذو خبرة لدعم ارتباط عن بُعد لمدة 3 أشهر يركز على عمليات أمان الشبكة، بشكل أساسي ضمن بيئات Fortinet.<br> المرشح المثالي يجمع بين أساسيات الشبكات القوية مع خبرة تشغيل أمان عملية وعميقة وواقعية عبر Fortinet Security Fabric.<br> المسؤوليات الأساسية إدارة، رصد، والحفاظ على بنية أمان الشبكة مع التركيز على حلول Fortinet (FortiGate, FortiManager, FortiAnalyzer, FortiSwitch/FortiAP حسب الاقتضاء) أداء عمليات الأمان اليومية: إدارة سياسات الجدار الناري، إعداد VPN واستكشاف أخطاءه، تحليل الحركة، ودعم الاستجابة للحوادث تصميم وتنفيذ والحفاظ على إعدادات التوجيه، التبديل، وتقسيم الشبكة بالتنسيق مع فريق الشبكة لدى العميل رصد أحداث الأمان والسجلات، فرز التنبيهات، والتصعيد/الاستجابة للحوادث وفق بروتوكولات العميل إجراء تدقيقات قواعد الجدار الناري، تحسين السياسات، ومراجعة وضع الأمان دعم التصحيحات، ترقيات البرامج وإدارة التغييرات لأجهزة Fortinet استكشاف المشكلات المعقدة للشبكة والأمان عبر LAN/WAN، VPN، وطبقات أمان المحيط توثيق الإعدادات، إجراءات التشغيل القياسية، وتقارير الحوادث التعاون مع أصحاب المصالح لدى العميل عن بُعد، مع ضمان التواصل الواضح والتنفيذ في ساعات العمل المشروع الحد الأدنى 5–7 سنوات من الخبرة في هندسة الشبكات وعمليات الأمان خبرة عملية قوية مع منتجات Fortinet (جدار حماية FortiGate إلزامي؛ FortiManager/FortiAnalyzer مفضل بشدة) أساس قوي في مبادئ الشبكات الأساسية: TCP/IP، التوجيه/التبديل، VPN (IPsec/SSL)، DNS، وتقسيم الشبكة خبرة عملية في أمان الشبكة: تحليل السجلات، فرز الحوادث، إدارة سياسات الجدار الناري شهادات Fortinet مطلوبة — NSE 4 كحد أدنى؛ NSE 5–7 مفضل بشدة القدرة المثبتة على العمل بشكل مستقل في بيئة عن بُعد مع إشراف بسيط مهارات توثيق وتواصل قوية، بما في ذلك الراحة في التعامل مع أصحاب المصالح الناطقين بالعربية و/أو الإنجليزية حسب الحاجة</span> </div>

Property Security & Guest Relations Manager Company Description Ahmed Global Investments is an international real estate investment and property management company with residential and vacation rental properties in Egypt. The company is focused on providing safe, well-maintained accommodations and exceptional guest experiences while protecting company assets and supporting long-term growth. Ahmed Global Investments values professionalism, integrity, reliability, and outstanding customer service. We are seeking a trusted local representative to support property operations, guest services, and security functions in El Shorouk City and the Greater Cairo area. Role Description Reporting to the Property Manager and working as directed, the Property Security & Guest Relations Manager is responsible for property security, guest support, property inspections, contractor coordination, and owner assistance. This role serves as the local representative for company operations and helps ensure that all properties remain secure, well-maintained, and guest-ready. The successful candidate will conduct regular property inspections, coordinate maintenance activities, assist guests during check-in and check-out, respond to emergencies, and serve as a trusted point of contact for guests, contractors, and company representatives. When the owner is present in Egypt, the Property Security & Guest Relations Manager will be expected to provide licensed personal security, transportation support, and general assistance on a 24-hour availability basis. The employee must remain reachable at all times, accompany the owner when requested, and assist with travel, meetings, appointments, property visits, and other activities throughout Cairo, El Shorouk, and New Cairo. The employee will perform duties as assigned by the Property Manager and support company operations, guest services, property management activities, security functions, maintenance coordination, and other responsibilities as required. Responsibilities Property Security & Oversight Conduct weekly inspections of apartments and company properties Inspect doors, windows, locks, utilities, and overall property condition Monitor property security and identify potential concerns Meet and supervise contractors, maintenance personnel, and service providers Respond to emergencies and security-related incidents Coordinate with local authorities and emergency services when necessary Maintain records of inspections, incidents, and property activities Ensure properties remain secure, clean, and guest-ready Guest Relations Welcome guests during check-in and assist during check-out Assist guests with luggage when needed Arrange transportation and local services for guests Serve as a point of contact for guest needs and concerns Assist with communication between guests and local vendors or service providers Remain available to respond to guest issues and emergencies Help ensure a positive guest experience at all company properties Owner Support & Personal Security Accompany the owner when requested throughout Cairo, El Shorouk, New Cairo, and other locations within Egypt Provide licensed personal security and support services while the owner is present in Egypt Remain available on a 24-hour basis during periods when the owner is in Egypt Assist with transportation coordination and travel arrangements Assist with translation and communication in English and Arabic Assist the owner with appointments, meetings, banks, businesses, and government offices Accompany the owner during property visits, inspections, and business activities Maintain confidentiality and exercise discretion regarding company and personal matters Qualifications Required Qualifications Egyptian citizen Clean criminal record (فيش وتشبيه) Military service completed or legally exempt Must possess a valid security guard license, certification, or other authorization required to legally perform security duties in Egypt Ability to provide proof of current licensing, certification, or security training upon request Strong English language skills are required Must speak, read, and write English proficiently Must be able to communicate professionally with international guests without an interpreter Smartphone with Whats App Professional appearance and demeanor Excellent references and reputation for honesty, reliability, and trustworthiness Ability to work independently and responsibly Ability to maintain confidentiality and handle sensitive information Ability to provide 24-hour availability when the owner is present in Egypt Preferred Qualifications Previous experience in security, executive protection, hospitality, customer service, property management, military service, law enforcement, or related fields First aid certification Valid driver's license is a plus Residence near El Shorouk City is preferred Transportation can be provided when necessary Additional Information Compensation will be based on experience, qualifications, English proficiency, availability, and overall suitability for the position. Only candidates who meet the English language requirement, security licensing requirements, and demonstrate professionalism, reliability, discretion, and strong character will be considered.

We are seeking a technical and customer-focused Security Implementation Engineer to join our growing team. This role is central to our customer success mission, responsible for the end-to-end technical integration of new clients into COGNNA's security monitoring Platform. The ideal candidate is a hands-on expert with major SIEM/Security platforms and possesses deep system administration skills across Linux, Windows, and cloud environments, enabling them to independently troubleshoot and resolve complex integration challenges.<br><br>???? Key Responsibilities<br><br>???? Client Onboarding & Implementation:<br><br>Lead the technical onboarding process for new customers, from initial kick-off to full operational status Integrate customer log sources (e.g., firewalls, servers, cloud platforms, applications) with our security data lake Develop and configure custom parsers and data connectors to ensure accurate data ingestion and normalization<br><br>????️‍♂️ System Administration & Troubleshooting:<br><br>Utilize deep expertise in Linux and Windows Server to troubleshoot agent installations, log forwarding configurations, and connectivity issues directly on customer systems Act as the primary technical resource for diagnosing and resolving complex infrastructure and OS-level issues that impede data collection Contribute to the continuous improvement of our onboarding processes, creating documentation and automation scripts to increase efficiency<br><br>???? Security Advisory & Customer Success:<br><br>Serve as a trusted technical advisor to clients during the onboarding phase, providing guidance on logging best practices and security architecture Work closely with the Security Operations Center (SOC) and account managers to ensure a seamless handover of clients upon successful onboarding<br><br>Requirements<br><br>???? Experience:<br><br>Hands-on experience in a technical cybersecurity role (e.g., SOC Engineer, SIEM Engineer, Security Consultant)3+ with direct responsibility for technical implementation or support Proven experience managing and troubleshooting both Linux (e.g., Ubuntu, Cent OS) and Windows Server environments in a production setting<br><br>???? Technical Skills:<br><br>SIEM: Expertise with major SIEM platforms. Experience with systems like Splunk, Microsoft Sentinel, Elastic Search, or Google Sec Ops is essential Operating Systems: Deep proficiency in system administration, log management, and troubleshooting across Linux and Windows Scripting: Proficiency in at least one scripting language (e.g., Python, Bash, Power Shell) for automation and parsing Security Concepts: Strong knowledge of network security architecture, cloud security (AWS, Azure, GCP), and security devices (Firewalls, IDS/IPS, EDR) Google Cloud and management of Google Sec Ops experience<br><br>???? Soft Skills:<br><br>Exceptional problem-solving skills with the ability to work independently Strong communication and interpersonal skills, with an ability to articulate technical concepts to diverse audiences A proactive, detail-oriented, and self-motivated work ethic<br><br>Benefits<br><br>???? Impact that Matters - Build products that shape the future of cybersecurity and protect organizations globally.<br><br>???? Continuous Growth - Access to certifications, trainings, and opportunities to sharpen your expertise.<br><br>???? Ownership Mindset - Benefit from our benefits program and grow with COGNNA's success.<br><br>???? Culture of Trust - We empower talent, encourage ownership, and celebrate real outcomes.

Manage risk-based IT and Information Security audit engagements. Evaluate cybersecurity governance, security controls, and information security frameworks. Assess IT infrastructure, cloud environments, networks, databases, and critical applications. Review IT General Controls (ITGCs), application controls, identity and access management, change management, and disaster recovery processes. Evaluate compliance with regulatory requirements, industry standards, and internal policies. Identify control deficiencies, assess associated risks, and recommend practical remediation actions. Prepare and present audit findings and reports to senior management and relevant committees. Monitor and follow up on management action plans to ensure timely remediation of audit findings. Manage and mentor audit team members and ensure the quality and timely completion of audit engagements. <br><br>Requirements<br><br>Bachelor's degree in Information Systems, Computer Science, Cybersecurity, or a related discipline. Significant experience in IT Audit, Information Security Audit, IT Risk Management, or Cybersecurity Assurance. Professional certifications such as: CISA (Certified Information Systems Auditor) - preferred. CISM (Certified Information Security Manager). CISSP (Certified Information Systems Security Professional). CRISC (Certified in Risk and Information Systems Control). CIA (Certified Internal Auditor) with a focus on IT auditing. Strong knowledge of cybersecurity frameworks, IT governance, cloud technologies, and regulatory compliance requirements.

<h2 class="h5">Job description</h2> <div class="t-break" data-jb-field="description"> <span>ALUMIL Egypt, a leader in the aluminum industry, is looking for Security Personnel to maintain safety at our factory in 6th of October City. The position involves a 12-hour shift system, with three consecutive weeks of work followed by a full week off. We offer a stable work environment, health insurance, and meals for employees, along with accommodation. Ideal candidates should demonstrate commitment, discipline, and the ability to work under pressure. Previous experience in security is preferred but not mandatory.<br></span> </div>

Join EVA Pharma, a leading pharmaceutical company dedicated to empowering the fight for Health and well-being as a fundamental human right. Recognized and certified as a best place to work, we are committed to fostering a supportive and innovative environment for our team members. Job Summary <br><br>We are seeking a passionate and talented Information & Cyber Security Manager to join our dynamic team. The ideal candidate will contribute to our mission of enhancing human health and well-being,  <br>ensuring that we meet the highest standards of excellence in our industry.<br>Key Responsibilities: <br>Develop and enforce information security policies, standards, and risk management frameworks aligned with ISO 27001, NIST, and global best practices Lead security for Oracle EBS, Microsoft 365, and cloud platforms, implementing IAM, encryption, endpoint, and network security controls Oversee SOC operations, threat monitoring, vulnerability assessments, penetration testing, and incident response management Ensure compliance with local and international regulations (Egyptian Data Protection Law, GDPR, GxP) and manage internal and external security audits <br><br>Requirements<br><br><br>Bachelor's degree in Computer Science or related field (Master's preferred)7+ years of IT security experience with 3+ years in a leadership role relevant certifications (CISSP, CISM, ISO 27001)strong stakeholder management, and cybersecurity awareness leadership

Key Responsibilities Generate new business opportunities and manage the full sales cycle. Build and maintain strong relationships with enterprise customers. Identify client security needs and recommend tailored cybersecurity solutions. Prepare proposals, negotiate contracts, and close deals. Collaborate with technical teams to deliver the best solutions. Achieve monthly and annual sales targets. Requirements Bachelor's degree in Business, IT, Computer Science, or a related field.3-5 years of B2B sales experience, including 1+ year in cybersecurity or IT solutions sales. Strong knowledge of cybersecurity solutions (Network Security, Cloud Security, Endpoint Security, SIEM, IAM, etc.). Excellent communication, presentation, and negotiation skills. Proven track record of achieving sales targets. Fluency in English is required.

Own the end-to-end vulnerability management lifecycle across multiple environments (test, staging, DR, production). Coordinate and oversee vulnerability scanning activities using enterprise-grade tools over appliances, VMs and containers. Prioritize findings based on risk, ensure timely remediation with IT/Application teams, and track closure. Coordinate internal and external penetration testing engagements with third-party vendors. Review penetration test reports, validate findings, and follow up remediation until closure. Act as the technical bridge between assessors and internal technical teams. Run assurance activities across security controls (e.g., Firewall, EDR, AV, DLP, Sandbox, etc.). Ensure findings are remediated and closed within agreed SLAs and security baselines. Supervise POC activities for security tools and controls. Support requirement validation, testing, and evaluation during information security initiatives.<br><br>Requirements<br><br>Bachelor's degree in computer science, Information Systems, or equivalent education +6 years of experience in the Info Sec. Proven hands-on experience in vulnerability management and penetration testing coordination. Strong understanding of security controls, system hardening, and risk assessment. Experience working closely with IT, Infrastructure, and Application teams. Ability to translate technical findings into clear, actionable remediation steps. Prior experience in a regulated environment (Fin Tech, banking is preferred) is a strong plus. Security certifications such as CISSP, CISM, CRISC, CEH, or equivalent are an advantage.