Principal Security Engineer

Client of Forsyth Barnes; Abu Dhabi; On-site; AED 350,000 - 500,000; Full time

Job summary

The Principal Security Engineer role will define and advance the technical direction of security engineering across critical banking systems and enterprise technology services. This role translates security strategy into practical architecture, engineering standards and controls protecting identities, infrastructure, applications, networks and data.

The position is based in Abu Dhabi and requires extensive experience in cybersecurity engineering and security architecture within regulated

Qualifications

• Extensive experience in cybersecurity engineering, security architecture or a closely related technical leadership discipline
• Proven responsibility for designing and implementing security capabilities within banking, financial services or another highly regulated environment
• Strong understanding of identity and access management, cryptography, network security, cloud security, application security, endpoint controls and security monitoring
• Demonstrated ability to convert threat scenarios and risk assessments into proportionate technical controls
• Practical experience establishing security standards, reference architectures, engineering processes and control assurance activities
• Confidence reviewing complex technology designs and challenging decisions that could increase operational or regulatory exposure
• Knowledge of recognised cybersecurity frameworks, secure development practices, vulnerability management and regulatory expectations relevant to financial institutions
• Exceptional communication skills, with the judgement to influence senior stakeholders and provide clear direction to technical teams

Responsibilities

• Set the technical vision and engineering roadmap for enterprise cybersecurity capabilities
• Architect security controls for banking platforms, cloud services, infrastructure, applications, networks and data environments
• Evaluate solution designs and provide clear security requirements throughout the project lifecycle
• Strengthen identity and access management, privileged access, encryption, key management, endpoint protection and security monitoring capabilities
• Lead the technical assessment of vulnerabilities, threats, control weaknesses and remediation options
• Define repeatable engineering patterns, reference architectures and secure configuration standards
• Partner with architecture, infrastructure, software delivery, operations, risk, audit and compliance stakeholders
• Review security incidents and emerging threats to identify lasting engineering improvements

Job description

The Principal Security Engineer will define and advance the technical direction of security engineering across critical banking systems and enterprise technology services. This role will translate security strategy into practical architecture, engineering standards and controls that protect identities, infrastructure, applications, networks and sensitive financial data. Success will involve reducing material security risk, improving the consistency of technical controls and enabling projects to deliver securely within a regulated banking environment. The position will provide authoritative guidance to engineering and delivery teams, assess complex designs, influence remediation priorities and ensure security decisions remain aligned with business objectives and applicable requirements.

Key Responsibilities

• Set the technical vision and engineering roadmap for enterprise cybersecurity capabilities
• Architect security controls for banking platforms, cloud services, infrastructure, applications, networks and data environments
• Evaluate solution designs and provide clear security requirements throughout the project lifecycle
• Strengthen identity and access management, privileged access, encryption, key management, endpoint protection and security monitoring capabilities
• Lead the technical assessment of vulnerabilities, threats, control weaknesses and remediation options
• Define repeatable engineering patterns, reference architectures and secure configuration standards
• Partner with architecture, infrastructure, software delivery, operations, risk, audit and compliance stakeholders
• Review security incidents and emerging threats to identify lasting engineering improvements

Requirements

• Extensive experience in cybersecurity engineering, security architecture or a closely related technical leadership discipline
• Proven responsibility for designing and implementing security capabilities within banking, financial services or another highly regulated environment
• Strong understanding of identity and access management, cryptography, network security, cloud security, application security, endpoint controls and security monitoring
• Demonstrated ability to convert threat scenarios and risk assessments into proportionate technical controls
• Practical experience establishing security standards, reference architectures, engineering processes and control assurance activities
• Confidence reviewing complex technology designs and challenging decisions that could increase operational or regulatory exposure
• Knowledge of recognised cybersecurity frameworks, secure development practices, vulnerability management and regulatory expectations relevant to financial institutions
• Exceptional communication skills, with the judgement to influence senior stakeholders and provide clear direction to technical teams

Benefits

• A senior technical mandate with direct influence over the protection of essential banking services and sensitive financial information
• Exposure to a broad portfolio spanning retail banking, wealth management, commercial banking, corporate finance, investment banking and cash management
• The opportunity to shape security architecture, engineering standards and long-term cyber resilience within an established financial institution
• Visibility across enterprise technology, risk, compliance, delivery and operational leadership functions
• A role in which expert recommendations can drive measurable improvements in control maturity and security risk reduction
• Access to complex high-impact security challenges that support continued professional and technical growth
• A competitive package aligned with the seniority and specialist scope of the position

Other

The position is based in Abu Dhabi and suits a security leader who combines deep technical expertise with enterprise-level judgement. Candidates should be prepared to operate across strategy, architecture, delivery assurance, remediation and stakeholder governance rather than focusing on a single security technology. Experience in financial services will be highly relevant while strong backgrounds in other regulated or mission-critical environments may also provide a suitable foundation. The successful candidate will be expected to communicate with precision, make risk-based recommendations and maintain a high standard of technical accountability.

• Extensive experience in cybersecurity engineering, security architecture, or a closely related technical leadership discipline.
• Proven responsibility for designing and implementing security capabilities within banking, financial services, or another highly regulated environment.
• Strong understanding of identity and access management, cryptography, network security, cloud security, application security, endpoint controls, and security monitoring.
• Demonstrated ability to convert threat scenarios and risk assessments into proportionate technical controls.
• Practical experience establishing security standards, reference architectures, engineering processes, and control assurance activities.
• Confidence reviewing complex technology designs and challenging decisions that could increase operational or regulatory exposure.
• Knowledge of recognised cybersecurity frameworks, secure development practices, vulnerability management, and regulatory expectations relevant to financial institutions.
• Exceptional communication skills, with the judgement to influence senior stakeholders and provide clear direction to technical teams.