Security & Compliance Engineer – Fintech (UAE)

About the role

We are seeking a Security & Compliance Engineer to join a fast‑growing, venture‑backed fintech building cloud‑native lending solutions for banks across the MENA region. The role blends hands‑on security engineering with an understanding of financial‑services regulations, working closely with product and engineering teams.

Key responsibilities

• Secure a cloud‑native Microsoft Azure environment, including IAM with Azure AD, Microsoft Entra ID and Okta.
• Implement application and API security throughout the SDLC / DevSecOps lifecycle.
• Conduct penetration testing, vulnerability assessments and secure code reviews, driving remediation with developers.
• Manage vulnerability remediation, security hardening and encryption, tokenisation, secrets and key management.
• Operate security monitoring and incident response using SIEM tools such as Microsoft Sentinel and Splunk.
• Support compliance initiatives for PCI‑DSS, ISO 27001 and GDPR, and align with UAE financial‑services regulator requirements.

Required profile

• 5–10+ years of experience in security engineering, cloud security, application security or DevSecOps.
• Strong hands‑on experience with Microsoft Azure security services.
• Proven ability to work directly with software engineering teams and influence secure development practices.
• Deep knowledge of IAM, encryption, tokenisation and key management.
• Experience with PCI‑DSS, ISO 27001 and GDPR compliance in a financial‑services context.

Required skills

• Microsoft Azure
• Azure AD / Microsoft Entra ID
• Okta
• SIEM (Microsoft Sentinel, Splunk)
• PCI‑DSS
• ISO 27001
• GDPR
• Penetration Testing
• Vulnerability Management
• Encryption
• Tokenisation
• Secrets and key management
• Application and API security
• SDLC DevSecOps

What we offer

• Competitive salary AED 30,000‑40,000 per month.
• Opportunity to shape security practices in a high‑growth fintech.
• Collaborative environment with engineering and product teams.