Security Specialist

Derq; United Arab Emirates; On-site; AED 120,000 - 200,000; Full time

Job summary

A leading technology company in the United Arab Emirates seeks a Security Specialist to enhance its security posture. You will assess risks, review cloud and application security, and work closely with engineering teams. The ideal candidate has 6-8+ years in the field, a solid understanding of web security standards, and experience with industry frameworks like SOC 2. This hands-on role offers the opportunity to impact smart infrastructure innovation while working in a fast-paced startup environment.

Qualifications

• 6-8+ years of experience in security engineering or cloud security.
• Strong understanding of web application security (OWASP Top 10).
• Experience securing cloud platforms including IAM, networking, and encryption.
• Comfortable in fast-moving, startup environments.
• Experience with SOC 2, ISO 27001, or similar frameworks.

Responsibilities

• Identify, assess, and mitigate security risks for the platform.
• Review IAM, access controls, and network security.
• Define and improve security policies and controls.
• Contribute to internal documentation and security best practices.

Skills

Security engineering

Application security

Cloud security

Web application security

Scripting skills (Python, Bash)

Tools

Vulnerability scanning tools

CI/CD security tools

Job description

Overview

Derq is an MIT spinoff powering the future of connected and autonomous roads, enhancing road safety and traffic management through our AI-driven smart infrastructure platform. Recently, we secured strategic investments from e& Capital and AT&T Ventures, fueling our growth and mission to make cities smarter and safer. We’re a team of passionate innovators, leveraging the latest in AI and technology to transform the future of mobility. With funding from e& Capital and AT&T Ventures, we’re scaling rapidly across the U.S., GCC, and beyond. Joining us means being at the forefront of smart infrastructure innovation, working alongside industry experts, and directly impacting road safety and autonomous technology. Together, we’re creating a safer, smarter, and more sustainable future.

Role Overview

We’re looking for a Security Specialist to help strengthen Derq’s security posture as we scale our platform. This role focuses on application, cloud, and data security, working closely with Engineering, Product, and Infrastructure teams to embed security into how we build and operate. This is a hands-on role with real ownership, not a purely advisory position.

Responsibilities

• Platform & Application Security – Identify, assess, and mitigate security risks across Derq’s platform and services.
• Support secure design reviews for new features and architectures.
• Conduct threat modeling and risk assessments.
• Partner with engineering teams on secure coding practices and remediation.
• Cloud & Infrastructure Security – Help secure cloud environments (AWS, GCP, Azure).
• Review IAM, access controls, secrets management, and network security.
• Support vulnerability scanning and remediation efforts.
• Monitor and respond to security incidents.
• Security Operations – Define and improve security policies, standards, and controls.
• Support incident response and post-incident reviews.
• Work with external vendors, auditors, and customers on security-related questions.
• Help prepare for security assessments (SOC 2, ISO 27001, customer security reviews).
• Awareness & Enablement – Partner with Engineering and Product to embed security early in the development lifecycle.
• Raise security awareness across teams without slowing delivery.
• Contribute to internal documentation and security best practices.

Qualifications

• 6-8+ years of experience in security engineering, application security, or cloud security.
• Strong understanding of web application security (OWASP Top 10).
• Experience securing cloud-based platforms, including IAM, networking, and encryption.
• Familiarity with CI/CD security, vulnerability scanning, and monitoring tools.
• Comfortable working in fast-moving, startup environments.
• Able to clearly explain security risks to non-security stakeholders.
• Experience with SOC 2, ISO 27001, or similar frameworks.
• Experience in IoT, ITS, smart mobility, or data-heavy platforms is a plus.
• Scripting or automation skills (e.g., Python, Bash).
• Background working closely with product and engineering teams.
• If located outside the UAE, relocation after successful completion of the probation period, subject to UAE immigration approval.