Lead Security Engineer

Role overview

Security ownership

• Define the security roadmap, risk register, policies, and engineering-friendly security culture.
• Secure the SDLC, source code, repositories, and developer environments.
• Harden cloud, network, container, Kubernetes, and infrastructure-as-code environments; implement edge and DDoS defenses.
• Establish monitoring, alerting, SIEM/SOAR detection, IAM, secrets management, and endpoint protection.
• Own vulnerability management, internal VA/PT, external pentests, red-team engagements, and incident response.
• Establish backup, disaster recovery, and business continuity practices.
• Secure data and AI/ML workloads; mitigate model and prompt injection, training-data leakage, and third-party AI/API exposure.
• Brief leadership and build a security team as CNTXT grows.

Required qualifications

• 7–10+ years in security engineering, including 2–3 years in a lead or ownership role.
• Hands-on depth in at least three of cloud security, application security, IAM, offensive security (VA/PT), and incident response.
• Strong GCP, AWS, or Azure security expertise, including Kubernetes and Terraform; multi-cloud is a plus.
• Practical experience with DDoS mitigation, WAF, SIEM, EDR, and secrets-management tools.
• Proficiency in Python, Go, or Bash scripting/automation.
• Communicate risk clearly to engineers and executives in a fast-moving, resource-constrained environment.

Preferred qualifications

• OSCP, CISSP, CCSP, CISM, or cloud security specialty certifications are nice to have.
• Early/first security-hire experience at a startup or scale-up is ideal.

Role opportunity

• Greenfield ownership with executive backing and broad impact on AI and data products.
• Potential growth path to Head of Security / CISO as the team expands.
• Competitive compensation and relocation support to the UAE.