DevSecOps Security Lead — Cloud, Apps & Compliance

Epergne Solutions; Dubai; On-site; AED 223,200 - 334,800; Full time

Job summary

Epergne Solutions in Dubai seeks a Security Consultant with strong expertise in application, cloud, infrastructure, and DevSecOps security assessments. The role involves performing various security evaluations and ensuring compliance while collaborating with development and infrastructure teams. Ideal candidates will have hands-on experience in vulnerability assessments, secure code reviews, and knowledge of key security standards. Preferred certifications include OSCP, CEH, and CISA.

Qualifications

• Strong experience in application, cloud, infrastructure, and DevSecOps security assessments.
• Hands-on expertise in VAPT, secure code review, container security, CI/CD security, and cloud security.
• Experience with compliance standards such as GDPR, PCI-DSS, ISO 27001.

Responsibilities

• Perform Web, Mobile, API, Cloud, Infrastructure & Container Security Assessments.
• Drive Shift-Left Security and DevSecOps practices.
• Review CI/CD pipelines, cloud posture, configurations & access controls.
• Identify vulnerabilities and provide remediation recommendations.
• Collaborate with Developers, Architects & DevOps teams to ensure secure deployments.
• Ensure compliance with security standards.

Skills

Web, Mobile & API Security Testing

OWASP Top 10 / API Top 10

Cloud Security ? AWS / Azure / GCP

Infrastructure & Database Security

CI/CD & DevSecOps Security

IAM, TLS/SSL, Cryptography

Jenkins

Terraform

Ansible

GitHub

Python

NodeJS

Rust

Education

OSCP

CEH

CISA

CISM

CCSP

CCSK

CKS

Job description

Epergne Solutions in Dubai seeks a Security Consultant with strong expertise in application, cloud, infrastructure, and DevSecOps security assessments. The role involves performing various security evaluations and ensuring compliance while collaborating with development and infrastructure teams. Ideal candidates will have hands-on experience in vulnerability assessments, secure code reviews, and knowledge of key security standards. Preferred certifications include OSCP, CEH, and CISA.