Security Engineer

About the role

A Security Engineer is sought in Dubai to strengthen enterprise application and infrastructure security through secure engineering practices, vulnerability management and security automation. The role identifies risks, integrates security into the SDLC and improves the security posture across cloud and on-premises environments.

Key responsibilities

• Perform application, infrastructure and cloud security assessments, and conduct secure code reviews and threat modeling.
• Implement secure SDLC practices and support security architecture reviews.
• Manage the full vulnerability lifecycle: identification, prioritization, remediation and reporting.
• Run security testing with SAST, DAST, SCA and vulnerability scanners, monitor security events and support incident response.
• Develop security standards, policies and best practices, and collaborate with Development, DevOps, Infrastructure and Cloud teams.
• Promote secure coding and security awareness initiatives.

Required profile

• 5+ years of experience.
• Knowledge of OWASP Top 10 and secure SDLC.

Required skills

• Application and infrastructure security, vulnerability management.
• SAST, DAST, SCA and cloud security (AWS, Azure, GCP).
• Preferred: Python, Bash, PowerShell; security automation, threat modeling, DevSecOps and security architecture.