DevSecOps

Job description / Role

Responsibilities & Activities:
• Keep up with the latest security industry trends.
• Understand current implementations and related attack surfaces.
• Examine and strengthen existing infrastructure, automation, and processes to achieve the highest levels of security.
• Automate security operations by integrating security solutions into the CI/CD workflow.
• Work with development teams to alleviate issues and put security measures in place.
• Educate teams on the adoption of DevSecOps practices, tools, and implementation.
• Manage security solutions such as web application firewalls (WAF), intrusion detection and prevention systems (IDS/IPS), integrity monitoring, vulnerability scanning, and cloud security/compliance monitoring frameworks.
• Analysing security incidents and assisting teams in solving them.
• Monitor and analyse traffic flow, application, and infrastructure records for suspicious activity or abnormal behaviour.
• Vulnerability scanning and penetration testing operations.

Requirements

Essential Skills & Experience:
• A degree in Computer Science, Software Engineering, Cyber Security, or any related field.
• Experience in the cybersecurity field.
• Penetration testing/vulnerability testing experience.
• Demonstrable understanding of modern architectural patterns such as containerization, microservices, web technologies and Cloud stack.
• Knowledge of CI/CD practices and related security challenges.
• Experience with Security Tools including SAST, DAST, Vulnerability Scanners, Container.
• Security, Code Security and Vulnerability Management.
• Experience with monitoring, alerting, and analyzing system metrics to identify problems and understanding system behavior specific to security concerns.
• Familiarity with the DevOps Culture, Tools and Practices. Directorate
• Familiarity with automation and configuration management tools.
• Experience with prioritizing and managing security risks.
• Familiarity with Responding to Security incidents, Attacks and Cyber Threats.
• Familiarity with Python, and bash scripting.
• Familiarity with Linux/Unix Operating System and command line.
• Ability to understand business requirements and translate them into technical solutions.
• Knowledge in secure development practices.

Nice to have:
• Mobile Application Security Assessment and Penetration Testing.
• Software Engineering and Development Experience.
• Reverse Software Engineering.
• Experience with Threat Modelling.
• Experience with cloud platform security including IAM (Identity and Access Management), WAF (Web Application Firewall), KMS, Threat Detection, Governance, Security Assessments and Shared responsibility Models.
• Knowledge in Authorization and Authentication protocols and schemes

About the Company

MBC GROUP is the largest media company in the Middle East & North Africa region that enriches people’s lives through information, interaction and entertainment. In 2002, nearly a decade after the launch of MBC1 in London, in 1991, MBC GROUP moved its headquarters to Dubai Media City, United Arab Emirates.

Today, MBC GROUP includes over 17 leading TV channels: MBC1 (general family entertainment); MBC2 & MBC MAX (24-hour western movies); MBC3 (children’s edutainment with a mix of both local productions and western acquisitions); MBC4 (entertainment for young families with a female-focus); MBC ACTION (an indigenous adrenaline-packed channel targeting young males with local and homegrown productions); MBC VARIETY (Western films and general entertainment with uninterrupted broadcasting); MBC DRAMA (24/7 Arabic drama) & MBC+ DRAMA (a joint pay-TV channel between MBC and OSN); MBC PERSIA (general family entertainment dubbed and subtitled in Farsi); WANASAH (24-hour Arabic music channel); MBC MASR & MBC MASR2 (general family entertainment geared towards the Egyptian family); MBC BOLLYWOOD (delivering the freshest in Bollywood content geared towards the region via an Arabized interface); MBC USA (on “Dish Network” in the US); MBC IRAQ (a premium channel aimed at the entire Iraqi family), MBC5 (new satellite channel dedicated to the Maghreb); all of them benefit from MBC STUDIOS which produces the region’s most compelling premium content for cinema, television and on-demand platforms. MBC GROUP also includes two FM radio stations: MBC FM (Gulf music) and Panorama FM (contemporary Arabic hit music).

Furthermore, part of MBC GROUP is Shahid and its premium subscription-based service Shahid VIP, the world’s leading Arabic streaming platform, home to highly rated original productions from the Arab world, a wide range of exclusive movies and premieres, as well as the top watched live Arab TV channels.