Security Engineer I UAE Based

PixelChain; Dubai; On-site; AED 120,000 - 180,000; Full time

Benefits offered by this job

Flight ticket/visa sponsorship

Visa sponsorship for work permit

MacBook

IPhone

Competitive pay

Leave package

Growth culture

Job summary

PixelChain in Dubai is seeking a Security Engineer to embed security into the software development lifecycle, secure cloud-native infrastructure, and help teams ship resilient, compliant applications.

You will lead threat modeling, automate security testing (SAST/DAST/IAAC), and harden Kubernetes and Docker environments while enforcing RBAC and least privilege. The role requires strong cloud security experience and collaboration across engineering teams.

Qualifications

• Requires solid experience in embedding security into SDLC and securing cloud-native workloads.
• Must be proficient with threat modeling, risk assessments, and secure design principles.
• Hands-on with SAST/DAST/IAAC and vulnerability management programs.
• Experience hardening Kubernetes and Docker environments and securing CI/CD pipelines.
• Familiarity with major cloud providers (Azure/AWS/GCP) and secure DevOps tooling.
• Strong scripting in Python or Bash for automation.

Responsibilities

• Weave security into the SDLC from design through deployment and run threat models before code ships.
• Automate security testing across the pipeline (SAST, DAST, SCA, IaC scanning).
• Harden Kubernetes and Docker environments with RBAC and network policies.
• Build and maintain security guardrails inside CI/CD pipelines (Jenkins, GitLab CI, GitHub, Azure DevOps, Bitbucket).
• Secure cloud workloads across Azure, AWS, and GCP; strengthen IAM and RBAC practices.
• Investigate security alerts, perform root-cause analysis, and support incident response end-to-end.
• Partner with engineering/DevOps/QA to remediate vulnerabilities and design secure-by-default systems.
• Strengthen software supply-chain security with SBOMs, dependency scanning, and secret detection.
• Support audits and align with ISO 27001, NIST CSF, CIS Benchmarks.
• Run secure-coding sessions and security awareness training for development teams.

Skills

Threat modeling

Security architecture

CI/CD security

SAST/DAST/IAAC

Kubernetes

Docker

Cloud security (Azure/AWS/GCP)

Vulnerability management

Python/Bash

Cross-functional communication

Education

Bachelor's degree in CS/Info Security/Engineering

Tools

Kubernetes

Docker

Jenkins

GitLab CI

GitHub Actions

Azure DevOps

Bitbucket

SonarQube

Trivy

OWASP ZAP

Burp Suite

Nessus

Microsoft Defender

Wazuh

Job description

Our client is a software development and digital solutions company serving clients across the FinTech, Gaming, and Marketing sectors. The company has successfully delivered 20+ innovative products across 5 international markets, including Brazil, Armenia, Saudi Arabia, and the UAE.

As the company scales its platforms across these markets, they're looking for a Security Engineer to embed security into the software development lifecycle, secure their cloud-native infrastructure, and help engineering teams ship applications that are resilient, compliant, and built to last.

Responsibilities:

• Weave security into the SDLC from design through deployment, running threat models and risk assessments before code ships.
• Automate security testing across the pipeline — SAST, DAST, SCA, and IaC scanning — to catch issues early.
• Harden Kubernetes and Docker environments with RBAC, network policies, and least-privilege access controls.
• Build and maintain security guardrails inside CI/CD pipelines (Jenkins, GitLab CI, GitHub, Azure DevOps, Bitbucket).
• Secure cloud workloads across Azure, AWS, and GCP, and strengthen IAM, MFA, and RBAC practices.
• Investigate security alerts, drive root-cause analysis, and support incident response end-to-end.
• Partner with engineering, DevOps, and QA to remediate vulnerabilities and design secure-by-default systems.
• Strengthen software supply-chain security through SBOMs, dependency scanning, and secret detection.
• Support audits and help maintain compliance with frameworks like ISO 27001, NIST CSF, and CIS Benchmarks.
• Run secure-coding sessions and security awareness training for development teams.

Requirements:

• Bachelor's degree in Computer Science, Information Security, Engineering, or a related field.
• 5+ years of experience in Application Security, Security Engineering, DevSecOps, or Cloud Security.
• Hands-on experience securing web applications, REST APIs, containers, and cloud-native workloads.
• Practical experience with Kubernetes, Docker, and at least one major cloud provider (Azure, AWS, or GCP).
• Comfortable running SAST, DAST, SCA, and IaC scans as part of a vulnerability management program.
• Experience embedding security into CI/CD pipelines (Jenkins, GitLab CI, GitHub, Bitbucket, or Azure DevOps).
• Solid grounding in secure SDLC principles and threat modeling.
• Familiarity with tools such as SonarQube, Trivy, OWASP ZAP, Burp Suite, Nessus, Microsoft Defender, or Wazuh.
• Working knowledge of Python or Bash for security automation.

Benefits:

• Flight ticket and full working visa provided.
• Full sponsorship and support throughout the visa and work permit process.
• Top-tier equipment, including a MacBook and iPhone.
• Competitive compensation tailored to your skills and experience.
• Comprehensive leave package.
• A dynamic, inclusive culture that invests in your growth.

Recruitment Process:

• HR Interview
• Technical Interview (take-home assignment &2 technical interviews)
• Background Check
• Offer