Security Engineer

Sundus; Abu Dhabi; On-site; AED 180,000 - 300,000; Full time

Job summary

Sundus in Abu Dhabi is seeking a Security Engineer to lead the design and implementation of security controls across applications, APIs, backend services, infrastructure and cloud environments.

You will integrate security into the SDLC, perform code and configuration reviews, and harden authentication, encryption and access controls. This role involves threat modeling, vulnerability management, and CI/CD security, with active monitoring and incident support.

Responsibilities

• Design, develop, configure, and implement security controls across apps, APIs, backend services, infrastructure and cloud.
• Support secure SDLC practices, review code/configs, strengthen API security, and ensure proper auth, encryption and access controls.
• Embed security testing, secrets management, dependency scanning and container security into CI/CD pipelines.
• Conduct threat modeling, vulnerability validation, risk-based prioritization, remediation tracking and hardening.
• Monitor security events, logs, alerts and system health; support incident response and root-cause analysis.

Job description

Job Code: 6383

Job Title: Security Engineer

Job Location: Abu Dhabi

Secure Engineering and Implementation

Design, develop, configure, and implement security controls within applications, APIs, backend services, infrastructure, and cloud environments, ensuring solutions are secure, scalable, reliable, and aligned with engineering standards.

Application, API and Platform Security

Support secure SDLC practices, perform code and configuration reviews, strengthen API security, protect sensitive data, and ensure authentication, authorization, encryption, and access controls are effectively implemented.

DevOps and Deployment Automation

Embed security testing, secrets management, dependency scanning, container security, release controls, and secure configuration checks into CI/CD pipelines and engineering workflows.

Threat Analysis, Vulnerability Management and Remediation

Conduct threat modeling support, vulnerability validation, risk-based prioritization, remediation tracking, and technical hardening across applications, systems, networks, databases, cloud services, and engineering pipelines.

Backup, Recovery, Monitoring and Support

Monitor security events, logs, alerts, vulnerabilities, and system health; support incident response activities, root-cause analysis, containment, recovery, and evidence collection.