DevSecOps Engineer – Abu Dhabi, UAE

Uasmart; Abu Dhabi; On-site; AED 420,000 - 540,000; Full time

Benefits offered by this job

12-month contract

Security platform exposure

Professional development

DevSecOps projects

Job summary

Uasmart in Abu Dhabi, UAE seeks two experienced DevSecOps Engineers for a 12-month contract to strengthen security in CI/CD pipelines and software delivery.

You will work with GitLab Secure, Fortify and Tenable, implement SAST/DAST, and automate security gates and audits across the lifecycle. UAE IA and cybersecurity frameworks awareness are essential.

Qualifications

• 6–7 years of overall professional experience.
• Minimum 3 years of experience working with secure CI/CD pipelines.
• Hands-on experience with GitLab Secure, Fortify and Tenable or equivalent tools.
• Knowledge of UAE information assurance requirements and related frameworks.

Responsibilities

• Design and maintain secure CI/CD pipelines.
• Integrate SAST, DAST, dependency, secret and container scanning into CI/CD workflows.
• Work with GitLab Secure, Fortify and Tenable or equivalent security tools.
• Implement security gates and severity thresholds.
• Validate identified vulnerabilities and security findings.
• Manage vulnerability exceptions with approvals and audit trails.
• Develop scripting and automation solutions using Python, Bash or PowerShell.
• Prepare security posture dashboards and reports.
• Communicate security findings to engineers and management.
• Support compliance with UAE information assurance requirements.

Skills

CI/CD security

SAST/DAST

Automation scripting

Python

Bash

PowerShell

Vulnerability management

Security gates

Stakeholder communication

NIST CSF

ISO 27001

MITRE ATT&CK

UAE IA requirements

Tools

GitLab Secure

Fortify

Tenable

Job description

Location: Abu Dhabi, UAE
Work Mode: Onsite
Vacancies: 2
Contract: 12 months, extendable
Experience: 6–7 years overall
Preferred: Candidates already based in the UAE

Job Category:

• Information Technology (IT) & Software
• Legal & Compliance

Job Overview

A reputed organization is looking for two experienced DevSecOps Engineers to join its team in Abu Dhabi, UAE on a 12-month contract with the possibility of extension. The role requires hands-on experience integrating security practices into CI/CD pipelines and managing application and infrastructure security throughout the software delivery lifecycle.

The successful candidates will work with security platforms such as GitLab Secure, Fortify and Tenable or equivalent tools. The role involves implementing SAST, DAST, dependency, secret and container scanning, establishing security gates and severity thresholds, and managing vulnerability exceptions with appropriate approvals and audit trails.

This opportunity is suitable for DevSecOps professionals with strong automation skills and knowledge of established cybersecurity frameworks and UAE information assurance requirements.

Key Responsibilities

• Design and maintain secure CI/CD pipelines.
• Integrate SAST, DAST, dependency, secret and container scanning into CI/CD workflows.
• Work with GitLab Secure, Fortify, Tenable or equivalent security tools.
• Implement security gates and severity thresholds.
• Validate identified vulnerabilities and security findings.
• Manage vulnerability exceptions with appropriate approvals and mitigations.
• Maintain exception expiry dates and audit trails.
• Develop scripting and automation solutions using Python, Bash or PowerShell.
• Monitor and improve application and pipeline security posture.
• Prepare security posture dashboards and reports.
• Communicate security findings and recommendations to engineers and management.
• Support compliance with relevant cybersecurity frameworks and UAE information assurance requirements.

Requirements & Qualifications

• 6–7 years of overall professional experience.
• Minimum 3 years of experience working with secure CI/CD pipelines.
• Hands-on experience with GitLab Secure, Fortify and Tenable or equivalent tools.
• Experience integrating SAST, DAST, dependency, secret and container scanning into CI/CD pipelines.
• Strong understanding of security gates and severity thresholds.
• Experience with vulnerability validation and exception management.
• Strong scripting and automation skills using Python, Bash or PowerShell.
• Working knowledge of NIST CSF.
• Working knowledge of ISO 27001.
• Working knowledge of MITRE ATT&CK.
• Knowledge of UAE IA requirements.
• Relevant industry certifications.
• Strong reporting, communication and stakeholder-management skills.
• Candidates already based in the UAE are ideally preferred.

Benefits & Career Growth

• 12-month contract with potential for extension.
• Opportunity to work on enterprise DevSecOps and cybersecurity initiatives.
• Exposure to modern security platforms and secure CI/CD practices.
• Professional development across DevSecOps, vulnerability management and security automation.
• Opportunity to strengthen expertise in cybersecurity frameworks and UAE information assurance requirements.