- Urgent requirement for Security Engineer with experience in Banking Domain is required for our banking clients in Dubai ,
- UAEHands-on expertise penetration testing across web, mobile, and APIs---Must
- Ability to identify and remediate vulnerabilities in code, scripts, and configurations.--Must
- Proficiency with SAST, DAST, SCA, IaC, and container scanning tools.--MustDevSecOps: Strong knowledge of CI/CD pipeline security and automation frameworks.--Must
- Deep expertise in Cloud security AWS and Azure best practices.--Must
- Security architecture: Experience in designing secure systems and conducting risk reviews.--Must
- Banking domain--Must
Position Overview
We are seeking an experienced Security Engineer with 7–12 years of expertise in application, infrastructure, and cloud security. The ideal candidate will bring hands-on experience in penetration testing, DevSecOps practices, cloud security (AWS & Azure), and security architecture.
You will play a pivotal role in fostering a robust security culture, driving awareness, and seamlessly integrating security practices across multiple cross-functional teams.
Responsibilities
- Conduct penetration testing across web applications, mobile applications, and APIs.
- Execute secure code reviews to identify and remediate vulnerabilities in application code, scripts, and configurations.
- Configure, optimize, and manage results from SAST, DAST, SCA, IaC, and container scanning tools.
- Drive DevSecOps initiatives, emphasizing security automation within CI/CD pipelines.
- Enhance the security posture of Kubernetes, container runtimes, and the underlying infrastructure.
- Contribute to security architecture design and conduct risk reviews for applications, cloud environments, and infrastructure.
- Lead threat modeling, risk assessments, and end-to-end vulnerability management.
- Promote security awareness by establishing and delivering training sessions and best-practice workshops.
- Partner with development, DevOps, and infrastructure teams to guarantee secure design and delivery.
- Act as a trusted security advisor, translating complex technical risks into actionable recommendations for non-technical stakeholders.
- Participate in incident response, conduct post-incident reviews, and ensure lessons learned are implemented.
- Stay continuously updated on emerging threats, modern attack vectors, and innovative security technologies.
- Experience & Soft
Skills
- 7–12 years of professional experience in information security roles.
- Proven hands-on expertise in web, mobile, and API penetration testing.
- Proficiency with application and infrastructure security tooling (SAST, DAST, SCA, IaC, and container scanning).
- Deep understanding of DevSecOps principles, CI/CD pipeline security, and security automation frameworks.
- Strong knowledge of cloud security best practices, specifically within AWS and Azure.
- Solid grasp of Kubernetes, Docker, container runtime security, and secure architecture design principles.
- Proficient scripting skills (e.g., Python, Bash) to build and automate security workflows.
- Strong analytical and problem-solving mindset.
- Excellent communication and stakeholder management skills, with the ability to articulate technical risks clearly to non-technical audiences.
- Highly collaborative approach when working with development, DevOps, product, and leadership teams.
- Passion for continuous learning and championing a company-wide culture of security.
- Good to Have
- Recognized industry certifications (e.g., OSCP, OSWE, OSEP, CISSP, CCSP, CKS, CKA).
- Exposure to prominent GRC frameworks (ISO 27001, SOC 2, NIST, CIS).
- Familiarity with global privacy and compliance regulations (GDPR, PCI DSS, HIPAA).
Skills
- cloud,security,architecture
