Security Engineer

Dicetek LLC; Dubai; On-site; AED 350,000 - 600,000; Full time

Job summary

Dicetek LLC in Dubai is seeking an experienced Security Engineer with 7–12 years of hands-on expertise in application, infrastructure, and cloud security. You will conduct penetration testing, lead secure coding reviews, and strengthen the security of CI/CD pipelines across multiple teams.

You will design secure architectures for cloud environments (AWS/Azure), manage security tooling (SAST/DAST/SCA, IaC, containers), and mentor colleagues while staying ahead of emerging threats.

Qualifications

• 7–12 years of information security experience.
• Hands-on testing across web, mobile, and API surfaces.
• Experience with SAST, DAST, SCA, IaC, and container scanning.
• Strong DevSecOps, CI/CD security, and automation capabilities.
• Cloud security expertise in AWS and Azure.
• Knowledge of Kubernetes, Docker, and container runtime security.
• Proficient scripting in Python and Bash.

Responsibilities

• Perform penetration testing across web, mobile, and API surfaces.
• Review code securely; remediate vulnerabilities in apps and configs.
• Configure and optimize SAST, DAST, SCA, IaC, and container scanners.
• Drive DevSecOps and security automation within CI/CD pipelines.
• Improve Kubernetes and container runtime security posture.
• Contribute to security architecture and risk reviews.
• Lead threat modeling and end-to-end vulnerability management.
• Deliver security training and awareness sessions.
• Collaborate with development, DevOps, and infra teams.
• Translate risks for non-technical stakeholders.
• Participate in incident response and post-incident reviews.

Skills

Penetration testing

DevSecOps

Cloud security

Security architecture

SAST/DAST/SCA

Container security

Kubernetes

Docker

Scripting (Python/Bash)

Stakeholder comms

Incident response

Threat modeling

CI/CD security

Tools

Kubernetes

Docker

CI/CD tooling

Security automation

Job description

Job Description: Security Engineer

Job Description: Security Engineer

Position Overview:

We are seeking an experienced Security Engineer with 7–12 years of expertise in application, infrastructure, and cloud security. The ideal candidate will bring hands‑on experience in penetration testing, DevSecOps practices, cloud security (AWS & Azure), and security architecture. You will play a pivotal role in fostering a robust security culture, driving awareness, and seamlessly integrating security practices across multiple cross-functional teams.

Responsibilities

• Conduct penetration testing across web applications, mobile applications, and APIs.
• Execute secure code reviews to identify and remediate vulnerabilities in application code, scripts, and configurations.
• Configure, optimize, and manage results from SAST, DAST, SCA, IaC, and container scanning tools.
• Drive DevSecOps initiatives, emphasizing security automation within CI/CD pipelines.
• Enhance the security posture of Kubernetes, container runtimes, and the underlying infrastructure.
• Contribute to security architecture design and conduct risk reviews for applications, cloud environments, and infrastructure.
• Lead threat modeling, risk assessments, and end‑to‑end vulnerability management.
• Promote security awareness by establishing and delivering training sessions and best‑practice workshops.
• Partner with development, DevOps, and infrastructure teams to guarantee secure design and delivery.
• Act as a trusted security advisor, translating complex technical risks into actionable recommendations for non‑technical stakeholders.
• Participate in incident response, conduct post‑incident reviews, and ensure lessons learned are implemented.
• Stay continuously updated on emerging threats, modern attack vectors, and innovative security technologies.

Experience & Soft Skills

• 7–12 years of professional experience in information security roles.
• Proven hands‑on expertise in web, mobile, and API penetration testing.
• Proficiency with application and infrastructure security tooling (SAST, DAST, SCA, IaC, and container scanning).
• Deep understanding of DevSecOps principles, CI/CD pipeline security, and security automation frameworks.
• Strong knowledge of cloud security best practices, specifically within AWS and Azure.
• Solid grasp of Kubernetes, Docker, container runtime security, and secure architecture design principles.
• Proficient scripting skills (e.g., Python, Bash) to build and automate security workflows.
• Strong analytical and problem‑solving mindset.
• Excellent communication and stakeholder management skills, with the ability to articulate technical risks clearly to non‑technical audiences.
• Highly collaborative approach when working with development, DevOps, product, and leadership teams.
• Passion for continuous learning and championing a company‑wide culture of security.