Senior Cloud Application Security Engineer

Additiv; Dubai; On-site; AED 220,000 - 420,000; Full time

Benefits offered by this job

Open environment

Meritocratic culture

Impactful work

Learning & development

Values-driven culture

Job summary

Additiv in Dubai is seeking a senior Cloud Application Security Engineer to oversee security for applications and APIs in production. You will review Defender for Cloud and Sentinel alerts, lead vulnerability assessment and coordinate fixes with CloudOps and development teams.

StrongAzure security experience and API testing skills are essential, with production testing within approved scopes. The role emphasizes collaboration across security and engineering teams, hands-on threat modelling, and

Qualifications

• 5+ years in application/security or cloud security with ownership of investigations or remediation.
• Hands-on in testing, triage and remediation validation for apps/APIs.
• Knowledge of Azure security (Defender for Cloud, Sentinel) and related tooling.
• Understanding of web/API risks, containers, auth, access controls and supply chains.
• Experience with DAST, API scanning and continuous VAPT.

Responsibilities

• Provide production-focused security oversight for applications, APIs and microservices.
• Review Defender for Cloud and Sentinel alerts, recommendations and findings.
• Operate and improve continuous vulnerability assessment and VAPT, including AI-enabled platforms.
• Correlate findings from Defender for Cloud, Sentinel, Azure Front Door, API Management, AKS, OpenTelemetry, Grafana.
• Investigate suspicious activity, assess risk, and coordinate remediation with CloudOps and dev teams.
• Support threat modelling, design reviews and secure development; assess auth, access controls and dependencies.
• Validate findings, filter false positives, retest through closure and document outcomes.
• Tune configurations and support incident investigations and security reporting.

Skills

Application security

Cloud security

Vulnerability management

Security engineering

Azure security

DAST

API security testing

KQL

OpenTelemetry

Grafana

AKS

Tools

Azure Monitor

Log Analytics

OpenTelemetry

Grafana

AKS

Job description

About this role

We are seeking a senior Cloud Application Security Engineer to strengthen application and API security across the production estate. The role investigates monitoring and assessment findings and coordinates remediation with CloudOps and development teams. The engineer will work with the existing security team.

Your responsibilities

• Provide production-focused security oversight for applications, APIs and microservices
• Review Defender for Cloud and Sentinel alerts, recommendations and security findings
• Operate and improve continuous vulnerability assessment and VAPT, including the AI-enabled security-validation platform when selected
• Correlate findings and telemetry from Defender for Cloud, Sentinel, Azure Front Door/WAF, API Management, AKS, OpenTelemetry, Azure Monitor and Grafana
• Investigate suspicious activity and potential attack paths; assess exposure, exploitability and business risk
• Support application/API threat modelling, design reviews and secure development; assess authentication, authorisation, access controls, secrets, dependencies, containers and supply-chain risks
• Validate findings, filter false positives, prioritise remediation, coordinate fixes with CloudOps and development teams, and retest through closure
• Tune assessment and detection configurations; support incident investigations, evidence collection, post-incident reviews and security reporting

Your qualifications, skills and experience

• At least 5 years of relevant application security, cloud security, vulnerability management or security engineering experience, with senior-level ownership of investigations or remediation
• Hands-on experience in application/API security testing, vulnerability triage and remediation validation
• Practical knowledge of Azure security, especially Defender for Cloud and Sentinel; familiarity with KQL, Azure Monitor, Log Analytics and OpenTelemetry is an advantage
• Understanding of web/API risks, secure development, authentication, authorisation, access control, containers, AKS/Kubernetes and software supply chains
• Experience with DAST, API scanning, vulnerability assessment or continuous VAPT
• Experience with .NET, ASP.NET (MVC, Web API), Web Services, andSQL DBs
• Clear communicator in English, able to explain findings to developers, CloudOps, security colleagues and management
• Investigative, evidence-led and collaborative; prioritises risk pragmatically and follows remediation through validation
• Careful to test production systems only within approved scope and change controls.
• Focused on improving production defence

Location

Work from our office in: Bucharest/ Dubai/ Sarajevo

We offer you

• An open-minded, international and fast-paced environment where decisions are made quickly, ideas are welcomed and people are encouraged to make a real impact

• A meritocratic culture built on ownership, performance and continuous feedback, where ambition is recognized and contribution matters

• The opportunity to influence decisions, challenge the status quo and shape better ways of working, while collaborating across teams and functions

• A strong commitment to continuous learning and professional development, with support to grow your expertise, capabilities and career

• A values-driven culture where we Care by building trust and lasting relationships, Commit by taking ownership and delivering on our goals, Collaborate by bringing the right people and expertise together, and Challenge ourselves to raise the bar and achieve stronger outcomes