Blue-Team Validation Engineer (Cloud & AI)

Client of Forsyth Barnes; Abu Dhabi; On-site; AED 320,000 - 520,000; Full time

Benefits offered by this job

Exposure to advanced security testing

Professional growth in AI-security

Structured dashboards & reporting

Job summary

Client of Forsyth Barnes seeks a Cyber Security Engineer to enhance blue-team validation across cloud, AI, and model supply-chain deployments in Abu Dhabi. The role translates threats into repeatable tests, tracks remediation, and ensures risk is reduced without disrupting services.

The ideal candidate will automate control validation, monitor intelligence sources, and maintain clear evidence of testing outcomes for executive reporting. Strong English communication is essential.

Qualifications

• Several years of practical experience in cyber security engineering, blue-team operations, offensive security, security validation, or a closely related discipline.
• Demonstrable experience replacing periodic manual penetration testing with continuous or automated control validation.
• Strong knowledge of cloud security, infrastructure security, vulnerability management, and deployment or pipeline assurance.
• Hands-on familiarity with autonomous penetration-testing platforms, including AWS Security Agent, Horizon3, or comparable tools.
• Practical experience assessing artificial-intelligence systems with tools such as Garak, PyRIT, Claude Security, Opus 4.x, Codex, or equivalent solutions.
• Ability to design and maintain tests aligned to the OWASP Large Language Model Top 10, MITRE ATLAS, and relevant adversarial security frameworks.
• Experience converting threat intelligence into actionable test scenarios, automation workflows, and measurable control outcomes.
• Comfort working with defect-management, evidence-management, dashboarding, and workflow-automation platforms.
• Understanding of financial-services security, regulatory expectations, risk-based prioritisation, and the need to protect availability and customer data.
• Clear understanding of first-line and second-line responsibilities, including the distinction between approved control validation and independent assurance.
• Strong analytical and investigative skills, with the ability to interpret technical findings and communicate business impact to varied stakeholders.
• Excellent written and verbal English, with the discipline to maintain precise documentation, remediation records, and executive-ready reporting.

Responsibilities

• Plan and execute continuous blue-team validation for significant technology deployments across cloud infrastructure, artificial-intelligence, and model supply-chain environments.
• Translate the approved threat coverage matrix into practical validation scenarios, test cases, and release-readiness evidence.
• Monitor MITRE ATLAS, OWASP Large Language Model, and related intelligence sources for techniques relevant to banking environments.
• Convert newly identified attack methods into repeatable automated or semi-automated tests within the seven-day service-level target.
• Use autonomous penetration-testing and adversarial validation capabilities to assess control effectiveness without disrupting critical services.
• Coordinate with security engineering, risk, and technology stakeholders to schedule testing around significant deployments and material changes.

Skills

Cyber security engineering

Blue-team operations

Threat intelligence

Test automation

OWASP ATLAS

MITRE framework

Analytical skills

Executive reporting

Tools

AWS Security Agent

Horizon3

DefectDojo

Attestation

Garak

PyRIT

Claude Security

Job description

Client of Forsyth Barnes seeks a Cyber Security Engineer to enhance blue-team validation across cloud, AI, and model supply-chain deployments in Abu Dhabi. The role translates threats into repeatable tests, tracks remediation, and ensures risk is reduced without disrupting services.

The ideal candidate will automate control validation, monitor intelligence sources, and maintain clear evidence of testing outcomes for executive reporting. Strong English communication is essential.