Security Engineer – Cloud & DevSecOps

About the role

The Security Engineer will own the security posture of cloud‑native and containerised environments, designing and operating layered security architectures primarily on AWS. You will embed security controls into Git‑based CI/CD pipelines, govern software supply‑chain integrity and lead incident response activities.

Key responsibilities

• Design and operate security architectures for AWS and Linux systems.
• Integrate automated vulnerability checks, SBOMs and artifact controls into the SDLC.
• Build telemetry pipelines feeding into SIEM for real‑time detection and alerting.
• Lead incident triage, root‑cause analysis and forensic investigations.
• Collaborate with engineering teams to define secure‑by‑default architectures, policy guardrails and WAF/CDN protections.
• Drive application security practices such as threat modelling, secure code review, and integration of SAST, DAST and SCA tools.

Required profile

• Bachelor’s degree in Computer Science, Information Security or equivalent.
• At least three years of experience in security engineering, application security or DevSecOps.
• Proficiency in Python, Golang or JavaScript for automation.
• Hands‑on experience with CI/CD, Infrastructure as Code and Linux hardening.
• Knowledge of SIEM, vulnerability assessment and incident response processes.
• Familiarity with OWASP, NIST and CIS security frameworks.
• Understanding of LLM security principles and related risk evaluation.
• Relevant certifications (e.g., AWS Security Specialty, OSCP, CKS, GIAC) are strongly preferred.

Required skills

• Python
• Golang
• JavaScript
• AWS
• Linux
• CI/CD
• Infrastructure as Code
• SIEM
• Vulnerability assessment
• Incident response
• OWASP
• NIST
• CIS
• LLM security
• SAST
• DAST
• SCA
• WAF
• CDN
• Git
• Containerised environments

What we offer

• Salary AED 35,000‑45,000 per month
• Family benefits