Lead Application Security & DevSecOps Engineer

Momentum; Abu Dhabi; On-site; AED 420,000 - 560,000; Full time

Job summary

Fanatics Momentum is seeking a Lead, Application Security to own testing and DevSecOps across our UAE-based platforms spanning sportsbook, casino and digital content. This hands-on leadership role embeds security across the SDLC, builds guardrails in CI/CD, and advances AI-enabled development with secure-by-design principles.

The ideal candidate blends strong software engineering fundamentals with offensive security mindset, guides engineering teams, and shapes risk-based security improvements

Qualifications

• 8+ years in software engineering, DevOps, or cybersecurity with at least 4 years in app security delivery.
• Proven track record owning enterprise app security platforms (AppScan, Checkmarx, Veracode, Snyk, Wiz).
• Hands-on with SAST/DAST/IAST/SCA, secrets detection, container scanning, and CI/CD integration.
• Strong communication; ability to translate security risk into business guidance.
• Experience securing AI-assisted development environments and LLM-based tooling.

Responsibilities

• Own application security testing across SAST, DAST, IAST, SCA, and container scanning.
• Manage security platforms lifecycle: evaluation, integration, upgrades, and optimization.
• Establish automated security workflows and CI/CD guardrails for secure delivery.
• Lead vulnerability triage, remediation tracking, and developer enablement.

Skills

Security leadership

Application security

DevSecOps

Threat modeling

Vulnerability management

Education

Degree or equivalent

Security certifications OSWE/OSCP

Tools

HCL AppScan

Checkmarx

Veracode

Snyk

GitHub Advanced Security

Burp Suite

Job description

Fanatics Momentum is seeking a Lead, Application Security to own testing and DevSecOps across our UAE-based platforms spanning sportsbook, casino and digital content. This hands-on leadership role embeds security across the SDLC, builds guardrails in CI/CD, and advances AI-enabled development with secure-by-design principles.

The ideal candidate blends strong software engineering fundamentals with offensive security mindset, guides engineering teams, and shapes risk-based security improvements