DevSecOps & App Security Engineer - Abu Dhabi On-site

DiceTek UAE; Abu Dhabi; On-site; AED 350,000 - 650,000; Full time

Job summary

Dicetek LLC in Abu Dhabi seeks an experienced Application Security Engineer to fortify web, mobile, and API security. You will lead threat modeling, automate security controls in CI/CD, and collaborate with engineering to secure cloud and container environments.

The role emphasizes hands-on testing, secure code reviews, and building secure software delivery practices across AWS/Azure, Kubernetes, and Docker-based setups.

Qualifications

• 7-12 years of professional information security experience.
• Hands-on penetration testing for web, mobile apps and APIs.
• Strong knowledge of DevSecOps, CI/CD security and automated security frameworks.
• Experience with cloud security across AWS and Azure; container security.

Responsibilities

• Conduct penetration testing across web, mobile and APIs.
• Perform secure code reviews to detect weaknesses in source code and configs.
• Configure and manage security scanning tools (SAST/DAST/SCA).
• Assess IaC configurations and container environments with security scans.
• Lead threat modeling and risk assessments across development lifecycles.
• Drive DevSecOps initiatives by integrating security into dev and deployment pipelines.
• Develop automation scripts using Python or Bash.
• Collaborate with DevOps and engineering to remediate vulnerabilities.
• Promote secure development practices and security awareness.

Skills

Penetration testing

Secure code review

DevSecOps

Cloud security

CI/CD security

SAST

DAST

SCA

IaC security scanning

Container security

Kubernetes

Docker

Python Bash scripting

Threat modeling

Tools

SAST tools

DAST tools

SCA tools

Kubernetes

Docker

Cloud security tools

Job description

Dicetek LLC in Abu Dhabi seeks an experienced Application Security Engineer to fortify web, mobile, and API security. You will lead threat modeling, automate security controls in CI/CD, and collaborate with engineering to secure cloud and container environments.

The role emphasizes hands-on testing, secure code reviews, and building secure software delivery practices across AWS/Azure, Kubernetes, and Docker-based setups.