Lead, Application Security & AI‑Driven DevSecOps

Fanatics Momentum; Abu Dhabi; On-site; AED 420,000 - 660,000; Full time

Job summary

Fanatics Momentum is seeking an experienced Lead, Application Security to own testing across SAST, DAST, IAST, SCA and container scanning. You will drive secure CI/CD integration, risk-based remediation, and developer enablement across FanMo’s platforms.

The role emphasizes hands-on security engineering, threat modeling, and evolving security controls for AI-enabled development, ensuring secure by design software in a fast-moving gaming tech environment.

Qualifications

• 8+ years of experience in software engineering, DevOps or cybersecurity.
• 4+ years of hands-on application security delivery.
• Experience owning enterprise application security platforms.
• Strong hands-on experience with SAST, DAST, IAST, SCA and container scanning.
• Experience integrating security controls within CI/CD pipelines.
• Production‑quality coding in Python/Go/Java/Kotlin/C#/TypeScript.

Responsibilities

• Own FanMo's application security testing across SAST, DAST, IAST, SCA, secrets detection and container scanning.
• Manage lifecycle of security platforms: evaluation, implementation, integration, upgrades, optimization.
• Establish onboarding, scanning policies, rules and testing frequency by application risk.
• Triage vulnerabilities, automate remediation routing, and track SLAs with engineering teams.
• Develop secure-by-default templates and guardrails for AI-assisted development.

Skills

Security testing

CI/CD security

Threat modeling

Secure coding

Automation tooling

Education

Bachelor's degree in CS/related field

Tools

HCL AppScan

Checkmarx

Veracode

Snyk

GitHub Advanced Security

Job description

Fanatics Momentum is seeking an experienced Lead, Application Security to own testing across SAST, DAST, IAST, SCA and container scanning. You will drive secure CI/CD integration, risk-based remediation, and developer enablement across FanMo’s platforms.

The role emphasizes hands-on security engineering, threat modeling, and evolving security controls for AI-enabled development, ensuring secure by design software in a fast-moving gaming tech environment.