{bc}
linkedin

Security Engineer

Dicetek LLC
Abu Dhabi, UAE
Contract
Mid-Senior
Onsite
Discovered 1 weeks ago
Web application penetration testingMobile application penetration testingAPI penetration testingSecure code reviewSAST, DAST, SCA, IaC, and container scanningDevSecOps and CI/CD security automation

Full Job Posting

Responsibilities

  • Conduct penetration testing across web applications, mobile applications, and APIs.
  • Review code securely and help remediate vulnerabilities in application code, scripts, and configurations.
  • Configure, optimize, and manage results from SAST, DAST, SCA, IaC, and container scanning tools.
  • Drive DevSecOps initiatives, including security automation in CI/CD pipelines.
  • Enhance security for Kubernetes, container runtimes, and underlying infrastructure.
  • Contribute to security architecture design and conduct application, cloud, and infrastructure risk reviews.
  • Lead threat modeling, risk assessments, and end-to-end vulnerability management.
  • Establish and deliver security awareness training and best-practice workshops.
  • Partner with development, DevOps, and infrastructure teams on secure design and delivery.
  • Advise stakeholders by translating technical risks into actionable recommendations.
  • Participate in incident response and post-incident reviews, and ensure lessons learned are implemented.
  • Stay current on emerging threats, attack vectors, and security technologies.

Experience and skills

  • Requires 7–12 years of professional experience in information security roles.
  • Requires hands-on web, mobile, and API penetration testing expertise and proficiency with application and infrastructure security tools.
  • Requires deep understanding of DevSecOps, CI/CD pipeline security, and security automation.
  • Requires cloud security knowledge, specifically AWS and Azure; Kubernetes, Docker, container runtime security, and secure architecture knowledge.
  • Requires scripting proficiency, such as Python or Bash, to build and automate security workflows.
  • Requires analytical and problem-solving ability, clear communication with non-technical audiences, and collaboration across teams.

Good to have

  • Industry certifications such as OSCP, OSWE, OSEP, CISSP, CCSP, CKS, or CKA are listed as good to have.
  • Exposure to ISO 27001, SOC 2, NIST, or CIS frameworks is listed as good to have.
  • Familiarity with GDPR, PCI DSS, or HIPAA is listed as good to have.

Apply for this job in 1 click

Skip the repetitive application forms

Install the Base Career Chrome Extension and autofill job applications across major job boards with your profile.

Sarah M.James T.Maya R.

Trusted by over 500,000 job seekers on Base Career

Start Free Today

More from this employer

More jobs at Dicetek LLC