Security & Compliance Engineer – Fintech

About the role

We are seeking a hands‑on Security & Compliance Engineer to own security across a fast‑growing, venture‑backed fintech platform that serves banks and financial institutions in the MENA region. You will work closely with engineering and product teams to embed security throughout the development lifecycle.

Key responsibilities

• Secure a cloud‑native Microsoft Azure environment, including IAM and network controls.
• Implement application and API security, secure SDLC/DevSecOps practices, and conduct penetration testing and vulnerability assessments.
• Perform secure code reviews, guide developers on remediation, and manage vulnerability remediation cycles.
• Manage IAM solutions such as Microsoft Entra ID/Azure AD and Okta, and oversee encryption, tokenisation, secrets and key management.
• Operate SIEM platforms (Microsoft Sentinel, Splunk) for security monitoring, incident response, and threat hunting.
• Support security architecture for third‑party integrations and ensure compliance with PCI‑DSS, ISO 27001, GDPR, and UAE financial‑services regulations.

Required profile

• 5–10+ years of experience in security engineering, cloud security, application security, or DevSecOps.
• Strong hands‑on experience with Microsoft Azure security and IAM technologies.
• Proven ability to work directly with software engineering teams and drive security improvements.
• Familiarity with UAE financial‑services regulatory requirements; experience with SAMA is a plus.

Required skills

• Microsoft Azure
• Microsoft Entra ID / Azure AD
• Okta
• SIEM (Microsoft Sentinel, Splunk)
• PCI‑DSS, ISO 27001, GDPR
• Penetration testing and vulnerability management
• Secure code review
• IAM, encryption, tokenisation, secrets & key management
• API security
• DevSecOps / Secure SDLC