Security Engineer

Sundus; Abu Dhabi; On-site; AED 180,000 - 340,000; Full time

Job summary

Sundus is seeking a Security Engineer in Abu Dhabi to design and implement robust security controls across applications, APIs, backend services, and cloud platforms. You will ensure secure, scalable, and compliant solutions aligned with engineering standards.

Responsibilities include strengthening SDLC security, conducting threat modeling, managing vulnerabilities, and supporting incident response with proactive monitoring and forensics; a strong focus on CI/CD security and automation.

Qualifications

• Experience securing applications, APIs, and cloud infrastructure.
• Knowledge of authentication, authorization, encryption, and access controls.
• Experience with CI/CD security and container security.

Responsibilities

• Secure Engineering and Implementation Design across applications, APIs, backend services, infrastructure, and cloud environments.
• Support secure SDLC practices, perform code and configuration reviews, and strengthen API security.
• Embed security testing, secrets management, and container security into CI/CD pipelines.
• Conduct threat modeling, vulnerability validation, risk prioritization, and remediation tracking.
• Monitor security events and logs, support incident response, root-cause analysis, containment, and recovery.

Skills

Security engineering

Secure SDLC

Threat modeling

Vulnerability assessment

Incident response

Job description

Job Code: 6383

Job Title: Security Engineer

Job Location: Abu Dhabi

Key Responsibility Description / Expected Deliverables

• Secure Engineering and Implementation Design, develop, configure, and implement security controls within applications, APIs, backend services, infrastructure, and cloud environments, ensuring solutions are secure, scalable, reliable, and aligned with engineering standards.
• Application, API and Platform Security Support secure SDLC practices, perform code and configuration reviews, strengthen API security, protect sensitive data, and ensure authentication, authorization, encryption, and access controls are effectively implemented.
• DevOps and Deployment Automation Embed security testing, secrets management, dependency scanning, container security, release controls, and secure configuration checks into CI/CD pipelines and engineering workflows.
• Threat Analysis, Vulnerability Management and Remediation Conduct threat modeling support, vulnerability validation, risk-based prioritization, remediation tracking, and technical hardening across applications, systems, networks, databases, cloud services, and engineering pipelines.
• Backup, Recovery, Monitoring and Support Monitor security events, logs, alerts, vulnerabilities, and system health; support incident response activities, root-cause analysis, containment, recovery, evidence.