Application Security Engineer

Mindtel; Dubai; On-site; AED 120,000 - 160,000; Full time

Job summary

A leading tech company in Dubai seeks an experienced security engineer to design and optimize security controls for web and API applications. You'll collaborate across teams to integrate security practices and ensure compliance while assessing and improving security measures. Ideal candidates have expertise in tools like Veracode and AWS WAF and are well-versed in modern DevSecOps practices.

Qualifications

• Experience in optimizing security controls for web applications.
• Knowledge of OWASP Top 10 and secure coding standards.
• Experience with cloud security in AWS, Azure, or GCP.

Responsibilities

• Design and implement security controls for applications.
• Collaborate with teams to integrate security in the SDLC.
• Assess and enhance security practices across ecosystems.

Skills

Security controls design

DevOps collaboration

Compliance alignment

Web application security

CI/CD security tools

Cloud security controls

Tools

Veracode

Burp Suite

AWS WAF

Job description

Job Summary:

• Design, implement, and optimize security controls for web and API applications.
• Collaborate with development, DevOps, and product teams to integrate security throughout the Software Development Lifecycle (SDLC).
• Ensure application security practices align with compliance and organizational risk management objectives.
• Assess and improve security of web and API ecosystems using industry best practices (e.g., OWASP Top 10, secure coding standards).
• Deploy and manage Web Application Firewall (WAF) solutions (e.g., F5 ASM, Imperva, Akamai Kona, Cloudflare, AWS WAF).
• Utilize CI/CD security tools and static/dynamic application security testing (SAST/DAST) solutions (e.g., Veracode, Fortify, Burp Suite, OWASP ZAP).
• Implement encryption standards, manage TLS configurations, and oversee key management systems (KMS).
• Apply cloud security controls across AWS, Azure, or GCP environments.
• Work cross-functionally with engineering, operations, and compliance teams to address security requirements.
• Contribute to a collaborative and innovation-focused environment, staying current with modern DevSecOps practices and security technologies.