Security Engineer

D4 Insight; Dubai; On-site; AED 240,000 - 420,000; Full time

Job summary

D4 Insight is seeking a Security Engineer in Dubai to strengthen enterprise application and infrastructure security by embedding secure engineering practices, vulnerability management, and security automation. You will focus on identifying risks and integrating security into the SDLC across cloud and on‑prem environments.

Your work encompasses security assessments, threat modeling, SSDLC implementation, and collaboration with Dev, DevOps, and Infrastructure teams to raise the security posture

Qualifications

• Minimum 5+ years in security engineering or related field.
• Experience securing enterprise apps and infrastructure across cloud and on-prem environments.
• Proven experience implementing SSDLC and security automation.

Responsibilities

• Perform application, infrastructure, and cloud security assessments.
• Conduct secure code reviews and threat modeling exercises.
• Implement SSDLC practices and support security architecture reviews.

Skills

Application Security

Infrastructure Security

Vulnerability Management

OWASP Top 10

SAST / DAST / SCA

Secure SDLC

Cloud Security

Python

Tools

SAST Tools

DAST Tools

Vulnerability Scanning

Job description

Location: Dubai, UAE

Experience: 5+ Years

Role Overview

We are seeking Security Engineer to strengthen enterprise application and infrastructure security by implementing secure engineering practices, vulnerability management, and security automation. The role focuses on identifying risks, integrating security into the SDLC, and improving the overall security posture across cloud and on-premises environments.

Key Responsibilities

Security Engineering

• Perform application, infrastructure, and cloud security assessments.
• Conduct secure code reviews and threat modeling exercises.
• Implement secure software development lifecycle (SSDLC) practices.
• Support security architecture reviews and design recommendations.

Vulnerability Management

• Manage end-to-end vulnerability lifecycle including identification, prioritization, remediation, and reporting.
• Perform security testing using SAST, DAST, SCA, and vulnerability scanning tools.
• Monitor security events and support incident response activities.
• Recommend improvements to strengthen enterprise security.

Governance & Collaboration

• Develop security standards, policies, and best practices.
• Collaborate with Development, DevOps, Infrastructure, and Cloud teams.
• Promote secure coding and security awareness initiatives.

Required Skills

• Application Security
• Infrastructure Security
• Vulnerability Management
• OWASP Top 10
• SAST / DAST / SCA
• Secure SDLC
• Cloud Security (AWS, Azure, GCP)
• Python / Bash / PowerShell (Preferred)

Preferred Skills

• Security Automation
• Threat Modeling
• DevSecOps
• Security Architecture