Cyber Security Engineer - Blue Team (Ref: 198316)

Forsyth Barnes; Abu Dhabi; On-site; AED 260,000 - 420,000; Full time

Job summary

Forsyth Barnes is seeking a hands-on Cyber Security Engineer specializing in Blue Team security, continuous security validation and AI security testing. Move beyond periodic pentests toward automated validation across cloud, apps, AI systems, and model supply chains.

This is a Blue Team engineering and control validation role, not traditional SOC monitoring or standalone Red Team testing. You'll implement automated security testing, manage findings with DefectDojo, enforce remediation SLAs, and

Qualifications

• Blue Team security engineering or continuous adversarial testing experience.
• Hands-on automated security testing and continuous control validation.
• Experience with autonomous security testing tools such as AWS Security Agent, Horizon3 or equivalent.

Responsibilities

• Operate automated security testing across cloud infrastructure, applications, AI systems and model supply chains.
• Monitor MITRE ATLAS and OWASP LLM threat intel, translating into repeatable test cases with SLA.
• Aggregate, deduplicate and manage findings through DefectDojo and attestation workflows.
• Enforce remediation SLAs and ensure security controls are validated before redeployment.
• Maintain Power BI dashboards tracking open findings, MTTR, gate pass rate and prompt injection block rate.
• Execute validation against a 2LoD-approved threat coverage matrix with measurable evidence.
• Develop and improve automated security validation processes to reduce manual testing.

Skills

Blue Team security engineering

Continuous security validation

AI security testing

Automated security testing

Threat intelligence

Vulnerability management

Power BI reporting

Jira automation

Tools

AWS Security Agent

Horizon3

Garak

PyRIT

Claude Security

Opus 4.x

Codex

Job description

Cyber Security Engineer – Blue Team & Continuous Security Validation

We are seeking a hands‑on Cyber Security Engineer specialising in Blue Team security, continuous security validation and AI security testing.

This role focuses on moving beyond traditional, periodic penetration testing towards automated, continuous validation of defensive security controls across cloud infrastructure, applications, AI systems and model supply chains.

You will be responsible for ensuring security controls are continuously tested against approved threat scenarios, findings are tracked through to remediation, and deployments meet defined security requirements.

This is a Blue Team engineering and control validation role, not a traditional SOC monitoring or standalone Red Team penetration testing position.

Key Responsibilities

• Continuous Security Validation: Operate automated security testing across cloud infrastructure, applications, AI systems and model supply chains for significant deployments.
• AI & LLM Security: Validate defensive controls against AI‑specific threats, including prompt injection, jailbreaks and emerging LLM attack techniques.
• Threat Intelligence: Monitor MITRE ATLAS and OWASP LLM threat intelligence, translating new attack techniques into repeatable security test cases within a seven‑day SLA.
• Security Findings Management: Aggregate, deduplicate and manage findings through DefectDojo and attestation workflows.
• Remediation & Deployment Gates: Enforce severity‑based remediation SLAs and ensure required security controls are validated before redeployment approval.
• Security Reporting: Maintain Power BI dashboards tracking open findings, mean time to remediate (MTTR), pipeline gate pass rate and prompt injection block rate.
• Control Assurance: Execute validation against a Second Line of Defence (2LoD)-approved threat coverage matrix, providing measurable evidence of control effectiveness.
• Automation & Improvement: Develop and improve automated security validation processes, reducing reliance on periodic manual penetration testing.

Required Experience & Skills

• Proven experience in Blue Team security engineering, offensive security validation or continuous adversarial testing.
• Hands‑on experience implementing automated security testing and continuous control validation.
• Experience with autonomous security testing tools such as AWS Security Agent, Horizon3 or equivalent.
• Practical exposure to AI red‑teaming and LLM security tools such as Garak, PyRIT, Claude Security / Opus 4.x or Codex.
• Understanding of the OWASP LLM Top 10, MITRE ATLAS and AI/model supply‑chain security risks.
• Experience with vulnerability management, security findings lifecycle management and remediation SLAs.
• Familiarity with Jira automation, security testing pipelines and Power BI reporting.
• Understanding of the 1LoD / 2LoD operating model, including the distinction between defensive control validation and independent red‑team assurance.

What Success Looks Like

• Security controls are continuously validated across significant deployments.
• Emerging AI and cloud threats are incorporated into test suites within seven days.
• Security findings are prioritised, tracked and remediated against defined SLAs.
• Deployment approval is supported by measurable evidence of security control effectiveness.
• Security assurance becomes continuous, automated and measurable rather than periodic and reactive.