Principal Security Engineer (m/f/d)

The Principal Security Engineer provides

• Security Architecture & Design

• Lead the design of advanced security architectures for:
• + Core banking platforms
• + Digital and cloud-based systems
• + Enterprise applications and infrastructure
• Define secure architecture patterns covering:
• + Network and infrastructure security
• + Application and API security
• + Data protection and encryption
• Ensure alignment with enterprise architecture and security standards

• Security Engineering & Implementation

• Lead implementation of enterprise security solutions, including:
• + Encryption and data protection mechanisms
• + Identity and access management (IAM) solutions
• + Threat detection and monitoring capabilities
• Guide engineering teams in integrating security controls into systems and platforms
• Ensure secure configuration and deployment of security technologies

• Technical Leadership & Advisory

• Provide hands-on technical guidance and mentorship to cybersecurity and engineering teams
• Define and promote best practices for secure design, development, and operations
• Review and approve security designs, architectures, and solutions across projects
• Act as a subject matter expert (SME) for complex security challenges

• Risk Management & Compliance

• Ensure all solutions comply with:
• + ADCB security standards and policies
• + Regulatory requirements (e.g., central bank guidelines, ISO standards)
• Perform security risk assessments and threat modeling for new initiatives
• Drive proactive identification and mitigation of security risks
• Support audits and regulatory assessments with technical expertise

• Vulnerability Management & Remediation Strategy

• Guide teams in identifying and remediating security vulnerabilities
• Establish frameworks for:
• + Secure code reviews
• + Penetration testing and validation
• Define remediation strategies and ensure timely closure of security findings

• Threat Detection & Incident Support

• Support development and enhancement of:
• + Threat detection capabilities
• + Security monitoring frameworks
• Provide technical expertise during security incidents and investigations
• Assist in root cause analysis and implementation of preventive measures

• Innovation & Continuous Improvement

• Evaluate emerging technologies and security trends
• Drive innovation in:
• + Cloud security
• + DevSecOps practices
• + AI/ML security considerations
• Continuously improve security engineering practices and standards

Education

• Bachelor’s or Master’s degree in:
• + Cybersecurity
• + Computer Science
• + Information Technology or related field

Experience

• 10+ years of experience in:
• + Cybersecurity engineering
• + Security architecture and solution design
• Proven experience in banking or highly regulated environments
• Strong background in enterprise security implementation and architecture

Certifications (Required / Preferred)

• CISSP (Certified Information Systems Security Professional) – mandatory
• OSCP (Offensive Security Certified Professional) – preferred

Technical Skills

• Deep expertise in:
• + Security architecture design and implementation

+ Identity & Access Management (IAM)

• + Encryption and data protection technologies
• Strong knowledge of:
• + Network and application security
• + Threat detection and monitoring tools
• Experience with:
• + Cloud security (AWS, Azure)
• + DevSecOps practices and CI/CD security
• Familiarity with:
• + Security frameworks (ISO 27001, NIST, etc.)

Leadership & Soft Skills

• Strong technical leadership and mentoring capabilities
• Excellent analytical and problem-solving skills
• Ability to communicate complex security concepts to diverse stakeholders
• Strong decision-making and risk management abilities
• Effective stakeholder engagement at senior levels

Ideal Candidate Profile

• Senior cybersecurity expert with deep architectural and engineering expertise
• Proven ability to design and implement secure systems at enterprise scale
• Strong understanding of banking security requirements and regulatory expectations
• Capable of leading technical teams and influencing security strategy
• + Balanced strength across technical depth, governance, and leadership
• Principal Security Engineer in Abu Dhabi, United Arab Emirates