Principal Security Engineer

AMD CyberSec; Dubai; On-site; AED 420,000 - 540,000; Full time

Job summary

AMD seeks a Principal Product Security Engineer to design, build, test, and implement secure SDLC across the product development lifecycle. You will lead security by design in a cloud-centric environment and collaborate with product teams to embed resilient security practices.

The role requires deep knowledge of secure coding, application security testing, and experience with PKI, OWASP Top10, and risk-based reviews.

Qualifications

• Master’s degree in computer science or cyber security, or equivalent demonstrated experience.
• Minimum 7+ years of engineering or software development experience.
• Minimum 5 years in a product security role in cloud and application security.
• Strong knowledge of software technologies (C/C++, Java, .Net, Python).
• Experience with SAST, DAST, SCA and penetration testing.
• Experience with Azure cloud.
• Experience with DISA STIGS and CIS benchmarks for OS hardening.
• Understanding of secure SDLC and Agile methodologies.
• Knowledge of PKI and OWASP Top10.
• Experience with threat modeling and security audits.

Responsibilities

• Define security by design in the Application Security Program mandates and work with product teams.
• Develop design patterns and code guidelines that meet security requirements.
• Be a thought leader and drive security solutions across the organization.
• Drive feature implementations with designs, reviews and tests; perform POC activities as needed.
• Lead DevSecOps with SAST, DAST, SCA and penetration test results with developers.
• Review current security controls and implement enhancements for cloud products.
• Participate in vulnerability investigations and support the Security Operations team.

Job description

About The Role

What you will be doing:

• Work directly with product teams in building a security by design and by default mindset by defining a structured approach to security in line with the Application Security Program mandates
• Develop design patterns, and code guidelines that meet business security and system requirements in line with the risk assessments, policies, and procedures
• Be a thought leader and help the wider organization drive security solutions implementation in-alignment with other stakeholders
• Drive feature implementations in line with the architecture via designs, coding, reviews and tests. Perform Proof of Concept (POC) activities as necessary
• Lead DevSecOps implementation through technology, process and human upskilling including SAST, DAST, SCA, and penetration test results in collaboration with the developers.
• Review current software security control measures and implement security enhancements for multiple cloud-based products
• Participate in vulnerability investigations and become an extended arm to the Security Operation team

What You Have

• Master’s degree in computer science or cyber security, a related field or equivalent demonstrated experience and knowledge
• Minimum 7+ years of experience in engineering or software development or related fields.
• Minimum 5 years hands-on product security role either as an architect, penetration tester or security engineer in cloud and application
• Strong working knowledge of
• software technologies such as C/C++, Java, .Net, python, etc.
• Experience analyzing, using SAST, DAST, SCA and penetration tests.
• Azure cloud
• IOT and Operating system hardening using DISA STIGS and CIS benchmark
• Experience ins secure software development or at least knowledge in secure coding practices and application security test report interpretation for various coding languages and multiple cloud services
• Strong knowledge of secure software development lifecycle and practices including Agile methodologies for software development
• Understanding of security by design principles and architecture level security concepts
• Sound understanding and experience in implementing security public key Infrastructure (PKI)),
• Experience implementing OWASP Top10 application security guidelines in cloud-based web applications
• Experienced in generating, defining, and reviewing penetration test results through knowledge of standard methodologies and tools including environmental configuration definition, security analysis, threat modeling, and system security audits
• Knowledge of current and emerging security threats and techniques for exploiting security vulnerabilities
• Exposure to international privacy requirements & cross-industry trends

Requirements

We are looking for a Principal Product Security Engineer whom his primary responsibility will be to for design, build, test and implementing secure SDLC across the product development lifecycle.

This role requires deep knowledge of building product security program from scratch which includes writing SOP, SWI, designing training for developers and gaining the trust of the product teams through hands‑on engagement. A deep understanding of web‑based secure code principles, and IOT security is a pre‑requisite. Candidates should have experience in FDA and EU MDR submission process.

About The Company

At AMD, we are dedicated to safeguarding our client against cyber threats. We recognize the distinct requirements and vulnerabilities of each enterprise, which is why we offer tailor‑made solutions to shield your data and assets effectively.

Our collaborative approach involves working closely with clients to devise a holistic cybersecurity strategy that harmonizes with their specific business objectives.