Technical Lead – Security Assessor

About the role

We are looking for an experienced Security Assessor to join our Dubai team. The role focuses on hands‑on security testing of web, mobile and API applications, source‑code review and intermediate cloud security assessments, with a strong emphasis on banking‑domain risk analysis.

Key responsibilities

• Perform Web Application Security Testing using OWASP Top 10, SANS and other industry standards.
• Conduct Mobile Application Security Testing for Android and iOS platforms.
• Evaluate API security for REST, SOAP, GraphQL and micro‑service architectures.
• Execute manual and automated source‑code reviews across multiple languages, providing detailed remediation guidance.
• Carry out intermediate cloud security reviews (AWS, Azure, GCP) and identify misconfigurations.
• Conduct basic network security assessments and configuration reviews.
• Map technical findings to business impact, apply risk‑rating frameworks (CVSS, OWASP) and produce clear reports.
• Collaborate with development, DevOps and architecture teams to integrate security controls into SDLC/DevSecOps pipelines.

Required profile

• 5‑8 years of hands‑on security testing experience.
• Solid understanding of banking domain risks and regulatory expectations.
• Ability to work independently with minimal supervision.
• Strong communication skills for reporting and stakeholder collaboration.

Required skills

• Web Application Security Testing
• Mobile Application Security Testing
• API Security Testing (REST, SOAP, GraphQL)
• Source Code Review (manual & automated)
• Cloud Security – AWS, Azure, GCP
• Network Security assessments
• Vulnerability Rating Mechanisms & Risk Assessment Frameworks (CVSS, OWASP)