Senior Cloud Security & App Risk Leader

amana; Dubai; Hybrid; AED 350,000 - 520,000; Full time

Job summary

Amana seeks a hands-on leader to own cloud and security across our platforms, serving as the senior authority for application security, cloud architecture, security standards, and operational resilience. The role leads a compact function while remaining personally involved in the work, initially supported by one engineer or analyst.

The role requires review of designs, threat modeling, vulnerability management, and coordinating with engineering to maintain secure delivery across AWS, GCP, and

Qualifications

• 10+ years in application security, cloud security, or related roles.
• Strong experience with architecture and system-level security, threat modeling, and secure design.
• Hands-on leadership of small security/engineering teams and collaboration with executives.

Responsibilities

• Own cloud and security across platforms, including application security and cloud architecture.
• Review designs for security and resilience risks before production.
• Run threat modeling for features, integrations, APIs, and data handling.
• Lead vulnerability management, remediation, and security testing activities.
• Build and drive a practical security program across AWS, GCP, IAM, and network boundaries.
• Coordinate with engineering to integrate secure delivery into normal development workflows.

Skills

Application security

Cloud security

Security engineering

Threat modeling

IAM & RBAC

Security architecture

DevSecOps

Secure SDLC

Code review

Tools

AWS

GCP

CI/CD

IaC (Terraform)

WAF

Logging/Monitoring

Job description

Amana seeks a hands-on leader to own cloud and security across our platforms, serving as the senior authority for application security, cloud architecture, security standards, and operational resilience. The role leads a compact function while remaining personally involved in the work, initially supported by one engineer or analyst.

The role requires review of designs, threat modeling, vulnerability management, and coordinating with engineering to maintain secure delivery across AWS, GCP, and