Security Architecture Lead

Al Hilal Bank; Abu Dhabi; On-site; AED 250,000 - 450,000; Full time

Job summary

Al Hilal Bank in Abu Dhabi seeks an experienced security architect to design and implement secure architectures across digital platforms, cloud and APIs. You will lead threat modelling, architecture reviews and SSDLC governance to strengthen cyber resilience and regulatory compliance.

The role requires robust experience in security architecture, cloud security, and DevSecOps practices, with a focus on risk reduction and secure design principles across the Bank's technology stack.

Qualifications

• Bachelor's degree or higher in information security, cybersecurity or related field.
• Industry certifications (CISSP/CSSLP/OSCP/CEH/CCSK/SABSA) preferred.
• Experience in security architecture reviews, threat modelling, vulnerability assessments and governance.

Responsibilities

• Design, implement and maintain secure technology architectures across digital platforms, ensuring security-by-design throughout lifecycle.
• Develop security architecture standards, reference architectures and secure design principles across apps, infrastructure and cloud services.
• Review solution designs to ensure compliance with security standards and regulatory requirements.
• Conduct threat modelling, architecture risk assessments and security design reviews during project lifecycles.
• Support SSDLC by defining security requirements and secure coding standards.
• Collaborate with Dev and Tech teams to embed security controls in CI/CD pipelines and automate testing.

Skills

Cyber security

Security architecture

Threat modelling

SSDLC

DevSecOps

Web security

API security

Cloud security

Zero trust

Education

Bachelor's degree in Information Security / Cybersecurity / Computer Science

Tools

CISSP

CSSLP

OSCP

CEH

CCSK

SABSA

Cloud Security Certification

Job description

Al Hilal Bank in Abu Dhabi seeks an experienced security architect to design and implement secure architectures across digital platforms, cloud and APIs. You will lead threat modelling, architecture reviews and SSDLC governance to strengthen cyber resilience and regulatory compliance.

The role requires robust experience in security architecture, cloud security, and DevSecOps practices, with a focus on risk reduction and secure design principles across the Bank's technology stack.