Security Engineer I UAE Based

Pixel Chain; Dubai; On-site; AED 300,000 - 460,000; Full time

Benefits offered by this job

Flight ticket and full working visa

Full sponsorship and visa support

MacBook and iPhone

Competitive compensation

Comprehensive leave package

Growth-oriented culture

Job summary

Pixel Chain is seeking a Senior Application Security Engineer in Dubai to weave security into the SDLC from design through deployment. You will run threat models, automate SAST/DAST/IAc, and fortify CI/CD pipelines across Azure, AWS, and GCP.

Join a fast-growing software and digital solutions company serving FinTech, Gaming, and Marketing clients worldwide. You’ll mentor teams, drive secure-by-default architectures, and support audits and compliance initiatives.

Qualifications

• Bachelor's degree in Computer Science, Information Security, Engineering, or a related field.
• 5+ years of experience in Application Security, Security Engineering, DevSecOps, or Cloud Security.
• Hands-on experience securing web apps, REST APIs, containers, and cloud-native workloads.
• Practical experience with Kubernetes, Docker, and at least one major cloud provider (Azure, AWS, or GCP).
• Comfortable running SAST, DAST, SCA, and IaC scans as part of a vulnerability management program.
• Experience embedding security into CI/CD pipelines (Jenkins, GitLab CI, GitHub, Bitbucket, or Azure DevOps).
• Solid grounding in secure SDLC principles and threat modeling.

Responsibilities

• Weave security into the SDLC from design through deployment, running threat models and risk assessments before code ships.
• Automate security testing across the pipeline — SAST, DAST, SCA, and IaC scanning — to catch issues early.
• Harden Kubernetes and Docker environments with RBAC, network policies, and least-privilege access controls.
• Build and maintain security guardrails inside CI/CD pipelines (Jenkins, GitLab CI, GitHub, Azure DevOps, Bitbucket).
• Secure cloud workloads across Azure, AWS, and GCP, and strengthen IAM, MFA, and RBAC practices.
• Investigate security alerts, drive root-cause analysis, and support incident response end-to-end.
• Partner with engineering, DevOps, and QA to remediate vulnerabilities and design secure-by-default systems.
• Strengthen software supply-chain security through SBOMs, dependency scanning, and secret detection.
• Support audits and help maintain compliance with frameworks like ISO 27001, NIST CSF, and CIS Benchmarks.
• Run secure-coding sessions and security awareness training for development teams.

Skills

Security engineering

DevSecOps

Cloud security

Threat modeling

Secure SDLC

CI/CD security

Security automation

Education

Bachelor's degree in CS/Info Security/Engineering

Tools

SonarQube

Trivy

OWASP ZAP

Burp Suite

Nessus

Microsoft Defender

Wazuh

Job description

Our client is a software development and digital solutions company serving clients across the FinTech, Gaming, and Marketing sectors. The company has successfully delivered 20+ innovative products across 5 international markets, including Brazil, Armenia, Saudi Arabia, and the UAE.

Responsibilities

• Weave security into the SDLC from design through deployment, running threat models and risk assessments before code ships.
• Automate security testing across the pipeline — SAST, DAST, SCA, and IaC scanning — to catch issues early.
• Harden Kubernetes and Docker environments with RBAC, network policies, and least-privilege access controls.
• Build and maintain security guardrails inside CI/CD pipelines (Jenkins, GitLab CI, GitHub, Azure DevOps, Bitbucket).
• Secure cloud workloads across Azure, AWS, and GCP, and strengthen IAM, MFA, and RBAC practices.
• Investigate security alerts, drive root-cause analysis, and support incident response end-to-end.
• Partner with engineering, DevOps, and QA to remediate vulnerabilities and design secure-by-default systems.
• Strengthen software supply-chain security through SBOMs, dependency scanning, and secret detection.
• Support audits and help maintain compliance with frameworks like ISO 27001, NIST CSF, and CIS Benchmarks.
• Run secure-coding sessions and security awareness training for development teams.

Requirements

• Bachelor's degree in Computer Science, Information Security, Engineering, or a related field.
• 5+ years of experience in Application Security, Security Engineering, DevSecOps, or Cloud Security.
• Hands‑on experience securing web applications, REST APIs, containers, and cloud‑native workloads.
• Practical experience with Kubernetes, Docker, and at least one major cloud provider (Azure, AWS, or GCP).
• Comfortable running SAST, DAST, SCA, and IaC scans as part of a vulnerability management program.
• Experience embedding security into CI/CD pipelines (Jenkins, GitLab CI, GitHub, Bitbucket, or Azure DevOps).
• Solid grounding in secure SDLC principles and threat modeling.
• Familiarity with tools such as SonarQube, Trivy, OWASP ZAP, Burp Suite, Nessus, Microsoft Defender, or Wazuh.
• Working knowledge of Python or Bash for security automation.

Benefits

• Flight ticket and full working visa provided.
• Full sponsorship and support throughout the visa and work permit process.
• Top‑tier equipment, including a MacBook and iPhone.
• Competitive compensation tailored to your skills and experience.
• Comprehensive leave package.
• A dynamic, inclusive culture that invests in your growth.

Recruitment Process

• HR Interview
• Technical Interview (take‑home assignment & 2 technical interviews)
• Background Check
• Offer