Senior Cloud Security Engineer — First Security Hire

Aleroy; United Arab Emirates; On-site; AED 300,000 - 520,000; Full time

Benefits offered by this job

Annual leave

Health insurance

Office in Yas Creative Hub

Job summary

Aleroy is building a unified platform for high-performance AI inference. You will be our first dedicated security engineer, reporting to the COO and collaborating with the CTO and engineering teams to secure a multi-tenant cloud platform.

You will own threat modelling, security testing, tenant isolation reviews, and security governance for data handling, access, and audits. This role supports ISO 27001 and SOC 2 readiness with auditable security controls.

Qualifications

• 6 to 10 years in security.
• Hands-on testing: code review, API/web app testing, cloud config review.
• Deep experience with at least one major cloud provider and containers/Kubernetes.
• Secured a multi-tenant SaaS or platform product.
• Implemented security controls that passed ISO 27001 or SOC 2 audits.
• Startup/scale-up experience as first/early security hire.
• Able to state risks clearly and propose practical fixes.
• Clear written English for reports to customers/auditors.

Responsibilities

• Threat modelling and design review for new features and architecture changes.
• Security testing of applications, APIs, and cloud setup with follow-up on findings.
• Review of tenant isolation and proof that data/workloads are kept apart.
• Security review of access, secrets, and configurations across cloud/production systems.
• Due diligence on security for partners and suppliers.

Skills

Security experience (6-10 years)

Threat modelling

Security testing

Cloud security

ISO27001/SOC2 experience

Multi-tenant SaaS security

English writing

Tools

Kubernetes

Job description

Aleroy is building a unified platform for high-performance AI inference. You will be our first dedicated security engineer, reporting to the COO and collaborating with the CTO and engineering teams to secure a multi-tenant cloud platform.

You will own threat modelling, security testing, tenant isolation reviews, and security governance for data handling, access, and audits. This role supports ISO 27001 and SOC 2 readiness with auditable security controls.