Security Engineer

Dicetek LLC; Abu Dhabi; On-site; AED 300,000 - 540,000; Full time

Job summary

Dicetek LLC in Abu Dhabi seeks an experienced information security professional to lead penetration testing across web, mobile, and API surfaces and to drive secure coding reviews.

The role requires hands-on expertise in SAST/DAST/SCA, IaC and container security, strong DevSecOps and CI/CD automation, cloud security (AWS/Azure), and excellent communication with stakeholders.

Qualifications

• Proven hands-on penetration testing across web, mobile, and API surfaces.
• Experience with secure code reviews and remediation of vulnerabilities in code, scripts, and configurations.
• Experience configuring and managing SAST, DAST, SCA, IaC, and container scanning tools.
• Strong DevSecOps background with security automation in CI/CD pipelines.
• Deep knowledge of cloud security practices, especially AWS and Azure.
• Solid grasp of Kubernetes, Docker, container runtimes, and secure architecture design.
• Proficient scripting skills (Python, Bash) to automate security workflows.
• Excellent communication and stakeholder management to translate risks to non-technical audiences.

Responsibilities

• Conduct penetration testing across web, mobile, and APIs.
• Perform secure code reviews to identify and remediate vulnerabilities.
• Configure, optimize, and manage results from SAST, DAST, SCA, IaC, and container scanning tools.
• Drive DevSecOps initiatives with security automation in CI/CD pipelines.
• Enhance security of Kubernetes, container runtimes, and infrastructure.
• Contribute to security architecture design and risk reviews for apps, cloud, and infra.
• Lead threat modeling, risk assessments, and end-to-end vulnerability management.
• Deliver security training sessions and best-practice workshops.

Skills

Penetration testing

Web/mobile/API security

DevSecOps

CI/CD security

Cloud security (AWS/Azure)

Kubernetes/Docker security

Python scripting

Strong communication

Stakeholder management

Collaborative work style

Tools

SAST tools

DAST tools

SCA tools

IaC scanners

Container scanning tools

Job description

• Conduct penetration testing across web applications, mobile applications, and APIs.
• Execute secure code reviews to identify and remediate vulnerabilities in application code, scripts, and configurations.
• Configure, optimize, and manage results from SAST, DAST, SCA, IaC, and container scanning tools.
• Drive DevSecOps initiatives, emphasizing security automation within CI/CD pipelines.
• Enhance the security posture of Kubernetes, container runtimes, and the underlying infrastructure.
• Contribute to security architecture design and conduct risk reviews for applications, cloud environments, and infrastructure.
• Lead threat modeling, risk assessments, and end-to-end vulnerability management.
• Promote security awareness by establishing and delivering training sessions and best-practice workshops.
• Partner with development, DevOps, and infrastructure teams to guarantee secure design and delivery.
• Act as a trusted security advisor, translating complex technical risks into actionable recommendations for non-technical stakeholders.
• Participate in incident response, conduct post-incident reviews, and ensure lessons learned are implemented.
• Stay continuously updated on emerging threats, modern attack vectors, and innovative security technologies.

Responsibilities

• Conduct penetration testing across web applications, mobile applications, and APIs.
• Execute secure code reviews to identify and remediate vulnerabilities in application code, scripts, and configurations.
• Configure, optimize, and manage results from SAST, DAST, SCA, IaC, and container scanning tools.
• Drive DevSecOps initiatives, emphasizing security automation within CI/CD pipelines.
• Enhance the security posture of Kubernetes, container runtimes, and the underlying infrastructure.
• Contribute to security architecture design and conduct risk reviews for applications, cloud environments, and infrastructure.
• Lead threat modeling, risk assessments, and end-to-end vulnerability management.
• Promote security awareness by establishing and delivering training sessions and best-practice workshops.
• Partner with development, DevOps, and infrastructure teams to guarantee secure design and delivery.
• Act as a trusted security advisor, translating complex technical risks into actionable recommendations for non-technical stakeholders.
• Participate in incident response, conduct post-incident reviews, and ensure lessons learned are implemented.
• Stay continuously updated on emerging threats, modern attack vectors, and innovative security technologies.

Experience & Soft Skills

• 7–12 years of professional experience in information security roles.
• Proven hands-on expertise in web, mobile, and API penetration testing.
• Proficiency with application and infrastructure security tooling (SAST, DAST, SCA, IaC, and container scanning).
• Deep understanding of DevSecOps principles, CI/CD pipeline security, and security automation frameworks.
• Strong knowledge of cloud security best practices, specifically within AWS and Azure.
• Solid grasp of Kubernetes, Docker, container runtime security, and secure architecture design principles.
• Proficient scripting skills (e.g., Python, Bash) to build and automate security workflows.
• Strong analytical and problem-solving mindset.
• Excellent communication and stakeholder management skills, with the ability to articulate technical risks clearly to non-technical audiences.
• Highly collaborative approach when working with development, DevOps, product, and leadership teams.
• Passion for continuous learning and championing a company-wide culture of security.

Good to Have

• Recognized industry certifications (e.g., OSCP, OSWE, OSEP, CISSP, CCSP, CKS, CKA).
• Exposure to prominent GRC frameworks (ISO 27001, SOC 2, NIST, CIS).
• Familiarity with global privacy and compliance regulations (GDPR, PCI DSS, HIPAA).