Platform Security Engineer

About the role

The Platform Security Engineer will protect large‑scale digital products used by a global audience. Based in the United Arab Emirates, you will work across engineering, infrastructure and security teams to strengthen platform defenses, safeguard customer data and respond to emerging threats.

Key responsibilities

• Maintain and enhance perimeter and network security controls, including WAF, rate limiting, anti‑bot and DDoS mitigation.
• Secure APIs by implementing OWASP API Security Top 10 controls, improving authentication, authorization and access‑control mechanisms.
• Lead the vulnerability management lifecycle: identify, prioritize, track and validate remediation of security issues.
• Coordinate external penetration‑testing engagements and ensure timely resolution of findings.
• Drive incident‑response activities for product security events and improve detection capabilities with monitoring teams.
• Partner with fraud‑prevention, trust‑and‑safety and data‑protection initiatives, applying encryption, masking and secure access controls.
• Promote secure development practices through Security Champions and Bug Bounty programs.

Required profile

• Minimum 5 years of information‑security experience, with at least 3 years focused on product security.
• Hands‑on experience managing Web Application Firewalls such as Wallarm, Akamai or Cloudflare.
• Strong knowledge of API security principles, OAuth, OpenID Connect, JWT and modern authentication frameworks.
• Proven track record in vulnerability management, CVSS scoring and remediation prioritisation.
• Experience coordinating penetration‑testing engagements and interpreting security assessment reports.

Required skills

• Web Application Firewall (WAF) technologies – Wallarm, Akamai, Cloudflare
• API security – OWASP API Top 10, API gateways
• Anti‑bot solutions – behavioural analysis, fingerprinting
• DDoS protection – Layers 3‑7 mitigation
• Vulnerability management – CVSS, remediation tracking
• Penetration‑testing coordination
• OAuth, OpenID Connect, JWT, session management
• SQL and Elasticsearch for security investigations and log analysis