Staff Application Security Engineer

About the role

We are seeking a Staff Application Security Engineer to establish and scale a dedicated application security function within a high‑growth technology environment in the United Arab Emirates. The role combines deep security expertise with hands‑on software engineering to embed security throughout the product development lifecycle.

Key responsibilities

• Design and implement a secure software development lifecycle (SDLC) including threat modeling, secure code reviews and pre‑release testing.
• Own and improve application security tooling such as SAST, DAST, SCA, secrets detection and container scanning, integrating them into CI/CD pipelines.
• Develop AI‑first security engineering approaches, using AI‑assisted vulnerability triage and automated remediation.
• Lead threat modeling and architecture security reviews for APIs, SDKs, dashboards and data pipelines.
• Manage vulnerability identification, risk assessment, prioritisation and remediation across scanners, pen‑tests and bug bounty reports.
• Provide hands‑on security testing, including manual code review and exploitation testing for authentication, authorization, injection, SSRF and business‑logic flaws.
• Mentor engineers, run security office hours and support a Security Champions program.

Required profile

• At least 8 years of software or security engineering experience, with 5+ years focused on application security.
• Proven ability to drive complex security initiatives independently and influence engineering teams.
• Excellent written and verbal communication skills for translating technical risks to diverse audiences.

Required skills

• Strong programming skills in TypeScript, JavaScript, Go or Python.
• Hands‑on experience with SAST, DAST, SCA, secrets detection and CI/CD integration.
• Deep knowledge of OWASP Top 10, API security, authentication/authorization design and threat modeling.
• Practical experience using AI‑assisted security tools for code analysis and vulnerability triage.