Security Engineer with experience in Banking Domain

About the role

We are looking for a senior Security Engineer with 7‑12 years of experience to support our banking clients in Dubai. The role focuses on application, infrastructure, and cloud security, driving security automation and risk mitigation across multiple teams.

Key responsibilities

• Conduct penetration testing for web, mobile, and API applications.
• Perform secure code reviews and remediate vulnerabilities in code, scripts, and configurations.
• Configure and manage SAST, DAST, SCA, IaC, and container scanning tools.
• Lead DevSecOps initiatives, embedding security into CI/CD pipelines.
• Enhance security posture of Kubernetes, Docker containers, and underlying infrastructure.
• Design security architecture, conduct risk reviews, threat modeling, and vulnerability management.
• Provide security training, workshops, and act as a trusted advisor to non‑technical stakeholders.
• Participate in incident response and post‑incident reviews.

Required profile

• 7‑12 years of professional experience in information security.
• Hands‑on expertise in web, mobile, and API penetration testing.
• Strong knowledge of DevSecOps, CI/CD security, and automation frameworks.
• Deep understanding of cloud security best practices for AWS and Azure.
• Experience with Kubernetes, Docker, and secure architecture design.

Required skills

• Penetration testing (web, mobile, API)
• SAST, DAST, SCA, IaC scanning, container scanning
• DevSecOps and CI/CD pipeline security
• AWS, Azure cloud security
• Security architecture and risk assessment
• Kubernetes, Docker container security
• Python, Bash scripting