Senior Application Security Engineer

AWR; Dubai; On-site; AED 120,000 - 200,000; Full time

Job summary

A leading multi-sector family business in the UAE is seeking a Security Software Development Lead to oversee application security reviews and ensure compliance with data protection laws. This role involves providing security guidance, coordinating with development teams to remediate vulnerabilities, and documenting security controls. Ideal candidates should have experience in threat modeling, secure coding practices, and cloud security. The company champions innovation and sustainability while nurturing partnerships and delivering excellence.

Qualifications

• Experience in security software development and application security.
• Familiarity with GDPR and UAE Data Protection Laws.
• Understanding of OWASP principles and secure coding.

Responsibilities

• Lead application security reviews and threat modelling activities.
• Provide application security guidance to teams.
• Coordinate remediation of vulnerabilities with development teams.
• Ensure compliance with data protection laws.
• Document application security controls and processes.

Skills

Security controls oversight

Application security guidance

Threat modelling

Cloud security (GCP/OCI/Azure)

Secure coding practices

Incident response

Job description

Lead security software development review for new product features and enhancements.

Plan and execute threat modelling activities within the software development lifecycle [following Safe Agile] to assess the security controls required for a given application.

Provide application security guidance and oversight across Security, Engineering & Product teams by participating in design, architecture, and code reviews.

Plan, scope and execute application security reviews and engage with product teams and developers to clarify security requirements.

Validate, triage, and coordinate with software development team to remediate the vulnerabilities discovered through threat modelling and design review activities.

Raising incidents, working on incidents with Operations and Development teams to ensure proper and rapid fixes.

Provide subject matter expertise on security controls, and secure coding and design practices across development teams.

Making sure that all solutions are in line with GDPR and UAE Data Protection Laws

Understanding the architecture of various cloud (GCP/OCI/Azure) components related to compute, storage, network, and security.

Able to understand and translate the security concerns/suggestions raised during assessment of solutions by DEVSECOPS.

Able to provide the workaround of the security issue in case the suggested solution cannot be implemented due to time, cost, or scope limitations.

Developing and maintaining documentation of application security controls

Understand OWASP and align coding practices accordingly

About Us

AW Rostamani Group is a leading multi-sector family business in the Middle East, driven by a legacy of over seven decades. Its operations span across a diverse range of sectors including automotive, real estate, retail, lighting solutions, travel, logistics, agritech and sustainable packaging, the Group serves over 155,000 customers and 24,000 businesses annually, supported by a diverse team of more than 3,000 employees.

Guided by its purpose to enrich lives across generations, AW Rostamani Group is dedicated to building purposeful businesses that meaningfully impacts people, industries and the planet. By Championing innovation, sustainability, and progress, AW Rostamani Group leads transformative change - creating a future where opportunity and progress go hand in hand.

Rooted in its rich legacy and guided by its values, AW Rostamani Group continues to lead with focus on the future, nurturing partnerships and delivering excellence across its operations.