Security Testing Engineer — Web, Mobile & API Security

Halian | Managed Services, Recruitment Agency & Contract Staffing; Abu Dhabi; On-site; AED 180,000 - 280,000; Full time

Job summary

Halian | Managed Services, Recruitment Agency & Contract Staffing is seeking a Security Testing Engineer in Abu Dhabi to join a leading fintech organization. You will perform security assessments across web, mobile, and API applications, conduct penetration testing, and review code for security weaknesses.

The role requires 5–6 years of hands-on experience and strong OWASP knowledge, with exposure to SAST, DAST, SCA, and secure code review.

Qualifications

• Minimum 5–6 years hands-on application security testing experience.
• Strong background in Web, Mobile, and API security testing.
• Experience with SAST, DAST, SCA, and Secure Code Review.
• Familiarity with React or React Native, Java and Node.js.
• Knowledge of OWASP standards and secure development practices.
• Professional certifications such as OSCP, CRTOP, CCPT, or CMWAPT.

Responsibilities

• Perform security assessments of web, mobile, and API-based applications.
• Conduct penetration testing and vulnerability validation activities.
• Review source code and architecture for security weaknesses.
• Support secure development and DevSecOps practices.
• Work closely with engineering teams to remediate security risks.
• Assess containerized and cloud-native application environments.
• Contribute to secure delivery of scalable fintech solutions.

Skills

Web Security Testing

Mobile Security Testing

API Security Testing

OWASP Standards

SAST

DAST

SCA

Secure Code Review

Container Security

React

React Native

Java

Node.js

OSCP

CRTOP

CCPT

CMWAPT

Job description

Halian | Managed Services, Recruitment Agency & Contract Staffing is seeking a Security Testing Engineer in Abu Dhabi to join a leading fintech organization. You will perform security assessments across web, mobile, and API applications, conduct penetration testing, and review code for security weaknesses.

The role requires 5–6 years of hands-on experience and strong OWASP knowledge, with exposure to SAST, DAST, SCA, and secure code review.