Security Consultant

Epergne Solutions; Sharjah; On-site; AED 120,000 - 180,000; Full time

Job summary

Epergne Solutions in Dubai is seeking a Security Consultant with 6+ years of experience in application, cloud, infrastructure, and DevSecOps security assessments. You will perform VAPT, secure code reviews, container security, and CI/CD security across enterprise environments to identify risks and implement secure solutions.

You will collaborate with development and infrastructure teams to ensure compliant deployments and maintain GDPR, PCI-DSS, ISO 27001 alignment across projects.

Qualifications

• Web, Mobile & API security testing across environments.
• OWASP Top 10 / API Top 10 coverage.
• SAST / DAST / Secure Code Review.
• Cloud security across AWS/Azure/GCP.
• Infrastructure & Database security considerations.
• Container security with Docker/Kubernetes/OpenShift.

Responsibilities

• Perform Web, Mobile, API, Cloud, Infrastructure & Container Security Assessments
• Conduct VAPT, Secure Code Reviews & Risk Assessments
• Drive Shift-Left Security and DevSecOps practices
• Review CI/CD pipelines, cloud posture, configurations & access controls
• Identify vulnerabilities and provide remediation recommendations
• Collaborate with Developers, Architects & DevOps teams to ensure secure deployments
• Ensure compliance with GDPR, PCI-DSS, ISO 27001 and other security standards

Skills

Web/Mobile/API Security

VAPT

Secure Code Review

Cloud Security AWS/Azure/GCP

DevSecOps

Docker/Kubernetes Security

CI/CD Security

GDPR/PCI-DSS/ISO27001

Burp Suite/Nessus/Checkmarx

Semgrep/Nuclei/MobSF

Jenkins/GitHub/Terraform/Ansible

Python/NodeJS

Tools

Burp Suite

Nessus

Checkmarx

Metasploit

Semgrep

Nuclei

MobSF

Frida

Objection

Jenkins

Terraform

Ansible

GitHub

Job description

Job Title: Security Consultant

Experience: 6+Years

Job Location: Dubai

Job Summary

Security Consultant with strong experience in application, cloud, infrastructure, and DevSecOps security assessments. The candidate should have hands-on expertise in VAPT, secure code review, container security, CI/CD security, and cloud security across enterprise environments. The role involves identifying security risks, ensuring compliance, and working closely with development and infrastructure teams to implement secure solutions.

Key Responsibilities

• Perform Web, Mobile, API, Cloud, Infrastructure & Container Security Assessments


• Conduct VAPT, Secure Code Reviews & Risk Assessments


• Drive Shift-Left Security and DevSecOps practices


• Review CI/CD pipelines, cloud posture, configurations & access controls


• Identify vulnerabilities and provide remediation recommendations


• Collaborate with Developers, Architects & DevOps teams to ensure secure deployments


• Ensure compliance with GDPR, PCI-DSS, ISO 27001 and other security standards

Key Skills

• Web, Mobile & API Security Testing


• OWASP Top 10 / API Top 10


• SAST / DAST / Secure Code Review


• Cloud Security ? AWS / Azure / GCP


• Infrastructure & Database Security


• Docker, Kubernetes, OpenShift Security


• CI/CD & DevSecOps Security


• IAM, TLS/SSL, Cryptography


• Burp Suite, Nessus, Checkmarx, Metasploit


• Semgrep, Nuclei, MobSF, Frida, Objection


• Jenkins, Terraform, Ansible, GitHub


• Python, NodeJS, Rust

Preferred Certifications

OSCP / CEH / CISA / CISM / CCSP / CCSK / CKS