Security Engineer: SDLC, Cloud & DevSecOps

PixelChain; Dubai; On-site; AED 120,000 - 180,000; Full time

Benefits offered by this job

Flight ticket/visa sponsorship

Visa sponsorship for work permit

MacBook

IPhone

Competitive pay

Leave package

Growth culture

Job summary

PixelChain in Dubai is seeking a Security Engineer to embed security into the software development lifecycle, secure cloud-native infrastructure, and help teams ship resilient, compliant applications.

You will lead threat modeling, automate security testing (SAST/DAST/IAAC), and harden Kubernetes and Docker environments while enforcing RBAC and least privilege. The role requires strong cloud security experience and collaboration across engineering teams.

Qualifications

• Requires solid experience in embedding security into SDLC and securing cloud-native workloads.
• Must be proficient with threat modeling, risk assessments, and secure design principles.
• Hands-on with SAST/DAST/IAAC and vulnerability management programs.
• Experience hardening Kubernetes and Docker environments and securing CI/CD pipelines.
• Familiarity with major cloud providers (Azure/AWS/GCP) and secure DevOps tooling.
• Strong scripting in Python or Bash for automation.

Responsibilities

• Weave security into the SDLC from design through deployment and run threat models before code ships.
• Automate security testing across the pipeline (SAST, DAST, SCA, IaC scanning).
• Harden Kubernetes and Docker environments with RBAC and network policies.
• Build and maintain security guardrails inside CI/CD pipelines (Jenkins, GitLab CI, GitHub, Azure DevOps, Bitbucket).
• Secure cloud workloads across Azure, AWS, and GCP; strengthen IAM and RBAC practices.
• Investigate security alerts, perform root-cause analysis, and support incident response end-to-end.
• Partner with engineering/DevOps/QA to remediate vulnerabilities and design secure-by-default systems.
• Strengthen software supply-chain security with SBOMs, dependency scanning, and secret detection.
• Support audits and align with ISO 27001, NIST CSF, CIS Benchmarks.
• Run secure-coding sessions and security awareness training for development teams.

Skills

Threat modeling

Security architecture

CI/CD security

SAST/DAST/IAAC

Kubernetes

Docker

Cloud security (Azure/AWS/GCP)

Vulnerability management

Python/Bash

Cross-functional communication

Education

Bachelor's degree in CS/Info Security/Engineering

Tools

Kubernetes

Docker

Jenkins

GitLab CI

GitHub Actions

Azure DevOps

Bitbucket

SonarQube

Trivy

OWASP ZAP

Burp Suite

Nessus

Microsoft Defender

Wazuh

Job description

PixelChain in Dubai is seeking a Security Engineer to embed security into the software development lifecycle, secure cloud-native infrastructure, and help teams ship resilient, compliant applications.

You will lead threat modeling, automate security testing (SAST/DAST/IAAC), and harden Kubernetes and Docker environments while enforcing RBAC and least privilege. The role requires strong cloud security experience and collaboration across engineering teams.