Senior DevSecOps Engineer

About the Company

MBC GROUP is the leading and largest media company in the Middle East and North Africa (MENA) region, that is home to over 17 leading TV channels, two radio stations, and Shahid – the world's leading Arabic streaming platform. MBC Shahid is a leading digital platform in the Middle East, providing high-quality streaming services for a diverse range of content. We are committed to delivering exceptional user experience and expanding our offerings to meet the evolving needs of our audience.

About the Role

We are seeking a Senior Cloud Security & DevSecOps Engineer with hands-on experience in securing cloud environments and integrating security into CI/CD pipelines. The ideal candidate will work closely with development, operations, and security teams to design, implement, and maintain secure, scalable, and automated cloud solutions. This role focuses on strengthening cloud security posture, automating security controls, and ensuring compliance across cloud-based applications and infrastructure.

Responsibilities

• Implement and manage security best practices across cloud environments (AWS/GCP).
• Build, maintain, and enhance DevSecOps pipelines with integrated security tools (SAST, SCA, DAST, IaC scanning).
• Deploy and manage cloud-native security services (IAM, KMS, WAF, GuardDuty/Security Center, etc.).
• Automate security controls using scripts, IaC tools (Terraform, CloudFormation), and CI/CD workflows.
• Educate teams on the adoption of DevSecOps practices, tools, and implementation.
• Monitor and respond to cloud security alerts, incidents, and compliance violations.
• Work with engineering teams to ensure secure design, architecture, and deployment of applications.
• Maintain documentation of security processes, configurations, and standards.
• Support audits, compliance checks, and implementation of frameworks (ISO 27001, SOC 2, CIS Benchmarks, etc.).
• Monitor and analyse traffic flow, application, and Cloud infrastructure records for suspicious activity or abnormal behavior.
• Continuously evaluate new tools and technologies to improve the organization's security posture.
• Analysing security incidents and assisting teams in solving them.
• Monitor and respond to cloud security alerts, incidents, and compliance violations.

Qualifications

• A degree in Computer Science, Software Engineering, Cyber Security, or any related field.

Required Skills

• Demonstrated ability and willingness to learn and build foundational knowledge in cloud security and application security.
• Cloud security experience on any of (AWS, Azure, or preferrably GCP).
• Familiarity with CI/CD practices and related security challenges.
• Familiarity with DevOps tools: GitLab CI/CD, Jenkins, GitHub Actions, or Azure DevOps.
• Familiarity with Security Tools including SAST, DAST, Vulnerability Scanners, Container.
• Good understanding of cloud IAM, network security, encryption, and security monitoring.
• Experience with monitoring, alerting, and analyzing system metrics to identify problems.
• Scripting skills in Python, Bash, or PowerShell.