Application Security Lead - (SAST, AI)

Michael Page; Abu Dhabi; On-site; AED 350,000 - 520,000; Full time

Job summary

Michael Page is seeking an seasoned leader to own and mature the Application Security programme across software engineering teams in Abu Dhabi. You will own SAST strategy, tooling, governance, and secure coding practices across cloud-native environments.

You will drive secure SDLC practices, manage GitLab security within pipelines, oversee vulnerability remediation, and lead AI-enabled security efforts while collaborating with DevOps and Platform teams.

Qualifications

• 7+ years in Software Engineering and/or Application Security.
• 3+ years in a dedicated Application Security role.
• Hands-on with SAST, dependency scanning, vulnerability management and secure SDLC practices.
• Strong experience securing source code repositories and CI/CD pipelines (GitLab preferred).
• Proficiency in Python, Java, Go, or TypeScript.
• Knowledge of OWASP Top 10 and LLM/AI security considerations.
• Familiarity with ISO 27001 and security governance frameworks.

Responsibilities

• Lead and mature the Application Security programme across software engineering teams.
• Own SAST strategy, tooling, and governance.
• Oversee source repository security within GitLab and development pipelines.
• Manage vulnerability identification, prioritisation, remediation tracking, and reporting.
• Establish application security standards, frameworks, and governance across dev teams.
• Partner with engineering leaders to embed security-by-design principles and enable secure coding training.
• Evaluate AI-assisted application security capabilities and manage risks around AI-generated code.

Skills

Application security leadership

Security governance

Secure SDLC

CI/CD security

Programming languages (Python/Java/Go/

Tools

GitLab

OWASP Top 10

ISO 27001

AI security tooling

Job description

Job description

This is a hands on leadership role focused on embedding secure software development practices across engineering teams while driving the adoption of modern Application Security and AI powered security capabilities.

The successful candidate will own the organisation's application security strategy, tooling, governance, and secure coding initiatives across cloud native and modern software environments.

Client Details

Leading organisation in Abu Dhabi.

Description

Lead and mature the Application Security programme across software engineering teams. Own and manage Static Application Security Testing (SAST) platforms, policies, and processes. Drive secure code practices throughout the software development lifecycle (SDLC). Manage source repository security within GitLab, ensuring strong security controls across code repositories and development pipelines. Oversee vulnerability management activities, including identification, prioritisation, remediation tracking, and reporting. Establish application security standards, frameworks, and governance across development teams. Partner closely with engineering leaders to build security capabilities and embed security-by-design principles. Design and deliver secure coding training programmes for software engineers. Introduce and operationalise AI-assisted application security capabilities to improve vulnerability detection, code review, and remediation efficiency. Evaluate and govern the security risks associated with AI coding assistants, AI-generated code, and LLM-enabled applications. Drive adoption of security tooling, metrics, and reporting to improve software security posture. Provide subject matter expertise on secure architecture, secure development practices, and application security controls. Collaborate with DevOps, Cloud, and Platform Engineering teams to secure cloud-native applications, containers, and CI/CD environments.

You will have technical ownership of:

• SAST strategy, tooling, and governance.
• Source repository security within the GitLab ecosystem.
• Dependency and software supply chain security.
• Vulnerability monitoring, oversight, and remediation governance.
• AI-driven application security initiatives and tooling.
• Secure coding standards and engineering enablement.
• Security controls across cloud-native applications and containerised workloads.

Profile

7+ years' experience in Software Engineering and/or Application Security, including 3+ years in a dedicated Application Security role. Hands on experience with SAST, dependency scanning, vulnerability management, and secure SDLC practices. Strong experience securing source code repositories and CI/CD pipelines, ideally within GitLab environments. Proficiency in at least two of Python, Java, Go, or TypeScript. Experience with cloud native application security, container security, and DevSecOps practices. Strong knowledge of OWASP Top 10, OWASP Top 10 for LLM Applications, and secure coding principles. Experience evaluating and implementing AI driven security tooling and managing risks associated with AI generated code and coding assistants. Familiarity with ISO 27001 and application security governance frameworks. Previous experience within Financial Services, Banking, or FinTech environments preferred

Job Offer

Opportunity to lead and shape a modern Application Security function within a growing financial services organisation. Exposure to cutting edge AI security initiatives and secure software engineering practices.

Skills

Application Security