Lead AI & Application Security Engineer

Marcura; Dubai; Hybrid; AED 180,000 - 300,000; Full time

Benefits offered by this job

Competitive Salary and Bonus

Inclusive Onboarding Experience

Marcura Wellness Zone

Global Opportunities

Diverse, Supportive Work Culture

Job summary

Marcura is seeking a Staff Security Engineer, AI & Application Security to build and own the company’s security engineering capability. The role covers offensive and defensive work, secure architecture, AI/LLM safety, and governance across apps, APIs, cloud, and AI models.

You’ll lead internal and external testing, shape secure patterns, and partner with product, engineering and operations to drive risk-based decisions.

Qualifications

• 8+ years total experience in security engineering, spanning both offensive and defensive work
• At least 4 years hands on offensive experience: scoping, leading and personally executing penetration tests and red team exercises across web applications, APIs, cloud environments and internal networks
• Demonstrable defensive engineering experience: hardening cloud and application environments, building or tuning detections, and designing identity, access and data protection controls
• Proven experience assessing and securing LLM or AI systems in production, including prompt injection, jailbreaks, insecure output handling, data exfiltration and tool or agent abuse
• Experience as a first, sole or founding security hire, or otherwise building a security capability from a standing start with minimal supervision and constrained resources
• Track record of influencing architecture and design decisions across engineering and product teams, not only reporting findings
• Experience supporting or leading security incident response in a production environment
• Experience owning and getting value from an MDR or managed SOC provider — onboarding telemetry, validating and tuning detection coverage, and holding the provider to account
• Experience scoping, commissioning and challenging external penetration tests, and integrating third party findings into an internal remediation process
• Experience in a regulated B2B, fintech, maritime or logistics environment preferred

Responsibilities

• Define and maintain a prioritised security roadmap for Marcura in order to ensure that finite capacity in a single security headcount is spent on the highest material risk
• Review the architecture and design of new and changing systems in order to prevent security weaknesses being built in
• Act as the group's trusted AI security advisor to enable fast, safe adoption of AI across the business
• Build and maintain a practical AI security framework and set of engineering standards
• Establish and personally run Marcura's internal penetration testing capability
• Own and direct Marcura's independent external penetration testing
• Execute technical penetration tests and red team exercises against production and pre production systems
• Design and run AI red team exercises against material AI/LLM deployments
• Improve baseline security of applications and cloud estate with hardening standards
• Strengthen identity, access and data protection controls
• Own the MDR partnership with eSentire and validate detections
• Strengthen detection engineering and incident response
• Oversee vulnerability lifecycle and remediation
• Build security tooling and automation
• Assess third party software and AI models for safety and protection
• Uplift security culture and provide engineering enablement
• Maintain documentation, metrics and leadership reporting

Skills

Vulnerability discovery

Penetration testing

Red team

AI/LLM security

Threat modelling

Security architecture

MDR coordination

Defensive engineering

Cloud security

Incident response

Tools

CI/CD security tooling

External pentest coordination tools

Job description

Marcura is seeking a Staff Security Engineer, AI & Application Security to build and own the company’s security engineering capability. The role covers offensive and defensive work, secure architecture, AI/LLM safety, and governance across apps, APIs, cloud, and AI models.

You’ll lead internal and external testing, shape secure patterns, and partner with product, engineering and operations to drive risk-based decisions.