Senior Cloud

We have urgentrequirementfor

Senior Cloud & Security Engineer-PKI/HSM + cloud + threat modelling isrequiredforourbankingclientinBahrain

Strong experience on Cloud Security (Azure + AWS) – configuration, IAM, APIs, monitoring, Dev Sec Opsis  THE MUST

Strong experience on Cryptography & PKI / HSM Expertiseis THE MUST

Strong experience on Security Engineering Expertise – firewalls, IDS/IPS, CASB, DLP, log management is THE MUST

Strong experience on threat modelling tools and methodologies (e.g., STRIDE, DREAD, MITRE ATT&CKis THE MUST

CISSP or CISM (either one)

Or PCI certification: PCI-ISA / PCI-QSA / PCIP

Or Pen Test certification: OSCP / CEH / eJPT

The Senior Security Engineer is responsible for engineering, implementing, and maintaining advanced security technologies across cloud and on-prem environments. The role requires deep technical expertise in cloud security, PKI/cryptography, secure protocols, Dev Sec Ops , and security tool configuration. The engineer will lead security implementations, automate controls, perform threat and vulnerability assessments, and ensure compliance with regulatory and industry standards.

Security Engineering & Implementation

• Configure, optimize, and maintain advanced security solutions (DLP, CASB, HSM, firewalls, IDS/IPS, endpoint controls).
• Implement and automate security controls in cloud, hybrid, and on-prem environments.
• Support secure design of systems, networks, APIs, containers, and Dev Ops pipelines (Dev Sec Ops ).
• Develop low-level security architecture, including PKI and cryptographic services.

Research, Testing & Threat Management

• Conduct threat modelling, vulnerability analysis, and penetration testing coordination.
• Validate security solutions against standards (ISO 27001, NIST, CIS).
• Investigate and resolve complex security incidents and vulnerabilities.

Governance & Compliance

• Ensure implementations comply with regulatory standards (CBB, PCI-DSS, ISO
• Track remediation activities and strengthen overall security posture.
• Produce technical documentation, architecture diagrams (C4), SOPs, and reports.

Product & Tool Ownership

• Manage CASB/DLP alerts and operations.
• Configure and support HSMs, key lifecycle management, and encryption solutions.
• Support lifecycle governance and policy tuning for security tools.

Collaboration & Support

• Work closely with IT, Architecture, Risk, Compliance, and Audit teams.
• Provide technical mentorship to junior engineers.
• Support internal and external audits and assessments.