Application Security Engineer

Mindtel; Dubai; On-site; AED 120,000 - 160,000; Full time

Job summary

A leading tech firm in Dubai is looking for a security specialist to design, implement, and optimize security controls for web and API applications. The ideal candidate will work closely with development, DevOps, and product teams to ensure security practices are integrated throughout the Software Development Lifecycle. Applicants should have experience with security testing tools and knowledge of cloud security controls across AWS, Azure, or GCP environments.

Qualifications

• Experience designing and implementing security controls for web and API applications.
• Familiarity with compliance and risk management objectives.
• Ability to assess and improve the security of software applications.

Responsibilities

• Design, implement and optimize security controls for web and API applications.
• Collaborate with development, DevOps, and product teams for integrated security.
• Ensure application security aligns with compliance and risk management.

Skills

Application security best practices

CI/CD security tools

Security testing tools

Cloud security controls

Tools

Web Application Firewall (WAF)

Burp Suite

OWASP ZAP

Veracode

Fortify

Job description

Job Summary (in List Format):

• Design, implement and optimize security controls for web and API applications.
• Collaborate with development, DevOps, and product teams to integrate security throughout the Software Development Lifecycle (SDLC).
• Ensure application security practices align with compliance and organizational risk management objectives.
• Assess and improve security of web and API ecosystems using industry best practices (e.g. OWASP Top 10 secure coding standards).
• Deploy and manage Web Application Firewall (WAF) solutions (e.g. F5 ASM, Imperva, Akamai, Cloudflare, AWS WAF).
• Utilize CI/CD security tools and static/dynamic application security testing (SAST/DAST) solutions (e.g. Veracode, Fortify, Burp Suite, OWASP ZAP).
• Implement encryption standards, manage TLS configurations, and oversee key management systems (KMS).
• Apply cloud security controls across AWS, Azure, or GCP environments.
• Work cross-functionally with engineering, operations, and compliance teams to address security requirements.
• Contribute to a collaborative and innovation-focused environment, staying current with modern DevSecOps practices and security technologies.