Security Engineer - Application and Cloud Security

Dicetek LLC; Dubai; On-site; AED 180,000 - 260,000; Full time

Job summary

Dicetek LLC in Dubai, United Arab Emirates, seeks an experienced security professional specializing in web, mobile and API penetration testing. You will contribute to securing cloud environments (AWS, Azure) and implement DevSecOps practices across CI/CD pipelines.

Ideal candidates have hands-on experience with SAST/DAST/SCA, container security and threat modeling, plus scripting in Python or Bash for security automation. Knowledge of ISO 27001 and CIS controls is a plus.

Qualifications

• Hands-on expertise in penetration testing across web, mobile and API domains.
• Experience with secure code review, vulnerability assessment and threat modeling.
• Proficiency in scripting for security automation (Python/Bash).

Skills

Web Penetration Testing

Mobile Penetration Testing

API Penetration Testing

Secure Code Review

Vulnerability Assessment

Threat Modeling

SAST

DAST

SCA

IaC Security

Container Security

DevSecOps

CI/CD Security

Secure SDLC

AWS

Azure

Kubernetes

Docker

Container Runtime Security

Security Architecture

Risk Assessments

Incident Response

Python Scripting

Bash Scripting

Security Automation

Communication Skills

Tools

Kubernetes

Docker

Job description

Core Skills & Experience

• Strong hands-on experience in Web, Mobile & API Penetration Testing
• Expertise in Secure Code Review, Vulnerability Assessment & Threat Modeling
• Hands-on experience with SAST, DAST, SCA, IaC & Container Security Tools
• Strong knowledge of DevSecOps practices, CI/CD Security Automation & Secure SDLC
• Experience securing AWS & Azure Cloud Environments
• Strong understanding of Kubernetes, Docker & Container Runtime Security
• Exposure to Security Architecture, Risk Assessments & Incident Response
• Proficiency in scripting (Python/Bash) for security automation workflows
• Strong communication skills with ability to engage development, DevOps & business teams

Good to Have:

• Certifications: OSCP, OSWE, OSEP, CISSP, CCSP, CKA/CKS
• Knowledge of ISO 27001, SOC 2, NIST, CIS Frameworks & Compliance Standards