Security Specialist (On Behalf of Client)

We are partnering with a UAE Federal Government Entity to help fill the following vacancy: Security Specialist

You will be the security specialist on a large-scale digital programme in the UAE.

New platform, new pipelines, new services, and you will be responsible for security across all of it.

No inherited security team, no legacy processes to follow.

You define the standards, embed them into the delivery, and make sure what ships is hardened.

This is a hands-on role.

You will work directly with backend, frontend, platform, and data teams to secure what they are building, not audit them after the fact.

Pipeline security: SAST, SCA, and container image scanning integrated into CI/CD.

You configure it, triage findings, and make sure vulnerabilities don't ship.

Platform hardening: Kubernetes clusters, container registries, API gateways, secrets management, and IAM.

You define the security baselines and enforce them.

Application security: threat modelling, secure code review, and penetration testing across microservices and web applications.

Security posture reporting: clear, actionable risk assessments for programme leadership.

No checkbox compliance; real signal on what matters.

5+ years in application security, infrastructure security, or DevSecOps

Hands-on with Kubernetes security,

CI/CD pipeline tooling, and container security Experience with IAM platforms and secrets management

Comfortable with OWASP Top 10, CVE/CVSS, and threat modelling

Can communicate security risk to non-technical stakeholders without losing fidelity

Has worked in delivery environments, not just audit or compliance

Further benefit details will be provided by our client to successfully shortlisted candidates.

Reminder: We are partnering with a client to help fill this vacancy.

The successful candidate will be employed by our client, not Whiteshield.