Application Support Engineer

Dicetek LLC; Dubai; On-site; AED 120,000 - 200,000; Full time

Job summary

A leading cybersecurity firm in Dubai seeks a security expert to conduct advanced penetration testing for web applications and infrastructure systems. The candidate must have at least 5 years of experience in Application Security, Infrastructure Security, and VAPT. Strong skills in tools like BurpSuite and knowledge of regulations such as ISO 27001 are essential. Excellent technical writing and the ability to collaborate with teams are required to ensure security weaknesses are addressed effectively. Competitive compensation offered.

Qualifications

• 5+ years of experience in Application Security Infrastructure Security VAPT.
• Strong knowledge of OWASP Top 10, Secure Code Review, and Cloud Security.
• Understanding of UAE regulations like ISO 27001 and PCI-DSS.

Responsibilities

• Conduct advanced penetration testing for web applications and infrastructure.
• Prepare detailed technical reports and executive-level summaries.
• Collaborate with teams to remediate identified security issues.

Skills

Application Security

Infrastructure Security

VAPT

Web Application Security

API Security

Cloud Security

Secure Coding

Technical Writing

Scripting in Python

Tools

BurpSuite

SonarQube

Fortify

Metasploit

Nessus

Qualys

Nmap

Acunetix

ZAP

KaliLinux

Job description

Key Responsibilities

• Conduct advanced penetration testing for web applications, APIs, networks, and infrastructure systems.
• Perform vulnerability scanning, assessment, and exploitation using industry-standard tools.
• Conduct in-depth security assessments to identify weaknesses in applications and infrastructure.
• Prepare detailed technical reports and executive-level summaries.
• Collaborate with development, IT, and infrastructure teams to remediate identified issues.
• Design and maintain test cases, scripts, and security toolsets.

Required Skills

• 5 or more years of experience in Application Security Infrastructure Security VAPT.
• Strong knowledge of Web , Mobile & AI Application Security (OWASP Top 10), Secure Code Review, API Security, Cloud Security (AWS, Azure, GCP), and Infrastructure Security.
• Experience with security tools such as BurpSuite, SonarQube, Fortify, Metasploit, Nessus, Qualys, Nmap, Acunetix, ZAP, and KaliLinux.
• Understanding of data protection regulations (UAE- IA, ISO 27001, NIST, PCI-DSS, etc.).
• Strong technical writing and documentation skills.
• Scripting experience in Python or Bash.