Security Lead, Cloud & App Security

Bamboo Card LLC; Dubai; On-site; AED 350,000 - 600,000; Full time

Benefits offered by this job

Health insurance

Visa sponsorship

Job summary

Bamboo Card LLC in Dubai is seeking a hands-on Security Lead to own platform security end to end. You will set strategy, review architecture, read code, and harden systems across infrastructure, applications, and data.

You will protect B2B/B2C portals and partner APIs, manage IAM, secure AWS, and embed security into CI/CD. The role requires extensive incident response and governance experience in a fast-growing fintech environment.

Qualifications

• 10+ years in information security with at least 3 years in a lead role.
• Hands-on experience securing production AWS environments.
• Strong web app and API security: OAuth2/OIDC, mTLS, API gateways, WAF, rate limiting, bot protection.
• Experience protecting systems handling sensitive or financial data, incl. fraud and account takeover.
• Real incident response experience beyond runbooks.
• Comfort reading code and reviewing architecture; .NET, SQL Server, or GitHub Actions a plus.
• Knowledge of GDPR, UAE PDPL, ISO 27001, SOC 2, NIST, or CIS.

Responsibilities

• Own security roadmap across infrastructure, applications, APIs, and data; report posture to CTO/leadership.
• Define and maintain security policies, standards, and a living risk register.
• Grow security function with tooling, processes, and future hires.
• Protect portals and partner APIs against OWASP Top 10, API abuse, bots, and fraud patterns.
• Own identity and access security: Cognito/SSO/MFA, session management, account takeover protection.
• Harden AWS: IAM, network segmentation, KMS, WAF, Shield, GuardDuty, Security Hub, CloudTrail; enforce least privilege.
• Integrate security into CI/CD and train engineers on secure coding.
• Lead incident response; run vulnerability management and coordinate external pentests.
• Drive GDPR/UAE PDPL compliance and progress toward ISO 27001 / SOC 2.
• Communicate risk clearly to engineers, executives, and clients; influence teams.

Skills

Cybersecurity leadership

Cloud security

Application security

Identity & access management

Threat modelling

Incident response

Secure coding practices

Vulnerability management

DevSecOps

Security architecture

Tools

AWS

GitHub Actions

WAF

SIEM

GuardDuty

CloudTrail

KMS

OAuth2/OIDC

Job description

Bamboo Card LLC in Dubai is seeking a hands-on Security Lead to own platform security end to end. You will set strategy, review architecture, read code, and harden systems across infrastructure, applications, and data.

You will protect B2B/B2C portals and partner APIs, manage IAM, secure AWS, and embed security into CI/CD. The role requires extensive incident response and governance experience in a fast-growing fintech environment.