Lead Security Engineer

About the role

CNTXT is seeking its first dedicated security hire to own and drive cybersecurity across the company. This hands‑on, high‑ownership position will define the security strategy and immediately implement it, from policy writing to running pentests.

Key responsibilities

• Define and execute CNTXT’s security roadmap, risk register and governance policies.
• Secure the full software development lifecycle with threat modeling, SAST/DAST, dependency scanning and secure code reviews.
• Harden multi‑cloud environments (GCP, AWS, Azure) and Kubernetes workloads, including network segmentation, WAF, DDoS protection and IaC guardrails.
• Implement identity, access and secrets management using SSO, MFA, least‑privilege IAM and tools like Vault or cloud KMS.
• Deploy endpoint protection (EDR/XDR), device management and encryption for employee devices.
• Own vulnerability management, conduct internal and external penetration tests, and lead incident response and business continuity planning.

Required profile

• 7–10+ years in security engineering with 2–3 years in a lead or first‑security‑hire role.
• Proven hands‑on experience in at least three areas such as cloud security, application security, IAM, offensive testing or incident response.
• Strong expertise in GCP, AWS or Azure, Kubernetes and Terraform.
• Ability to communicate risk clearly to engineers and executives in a fast‑moving environment.

Required skills

• Cloud platforms: GCP, AWS, Azure
• Infrastructure‑as‑code: Terraform
• Container orchestration: Kubernetes
• Security tooling: SAST/DAST, SIEM, EDR/XDR, WAF, DDoS mitigation, Vault or cloud KMS
• Scripting/automation: Python, Go, Bash

What we offer

• Greenfield ownership of security from the ground up with executive backing.
• Opportunity to shape security for AI and data products at scale.
• Clear growth path toward Head of Security or CISO.
• Competitive compensation, relocation support to the UAE and a dynamic tech ecosystem.