Senior Cybersecurity Architect and Engineer

DiceTek UAE; Abu Dhabi; On-site; AED 450,000 - 750,000; Full time

Job summary

Dicetek LLC seeks a Senior Cybersecurity Architect and Engineer for an on-site role in Abu Dhabi. You will strengthen security architecture, engineer controls across banking systems, and ensure compliance with UAE and international standards.

The role requires 8+ years in cybersecurity, with at least 3 years in banking or financial services. You will work across SIEM, XDR, identity security, cloud environments, application security and risk management, shaping secure architecture for critical

Qualifications

• 8+ years in cybersecurity with hands-on engineering and architecture experience.

Responsibilities

• Conduct secure architecture reviews across banking tech stack and applications.

Skills

Security architecture

SIEM

Zero trust

Cloud security

IAM/PAM

DevSecOps

OWASP / API security

Education

Bachelor's degree in CS/IT/Cybersecurity

Tools

CrowdStrike Falcon

Microsoft Defender

Splunk

Job description

Senior Cybersecurity Architect and Engineer

Job Snapshot - Role: Senior Cybersecurity Architect and Engineer - Location: Abu Dhabi, United Arab Emirates - Industry: Banking - Function: Computer-Network Security - Experience: 8 years in cybersecurity, including at least 3 years in banking or financial services - Job Type: Full Time - Work Arrangement: On-site

Dicetek LLC is seeking an experienced Senior Cybersecurity Architect and Engineer for a full-time, on-site opportunity in Abu Dhabi, United Arab Emirates. The role focuses on strengthening cybersecurity architecture, engineering security controls, securing banking applications and infrastructure, and maintaining alignment with applicable UAE banking regulations and international security standards. The successful candidate will bring extensive cybersecurity experience, including a minimum of three years within banking or financial services. The position requires strong technical expertise across security architecture, SIEM and SOAR technologies, endpoint protection, identity security, cloud environments, application security and cybersecurity risk management. The role covers critical banking systems, payment infrastructure, digital banking channels, enterprise networks and hybrid cloud environments. Candidates should demonstrate the ability to evaluate security risks, implement effective technical controls and support regulatory compliance across complex financial technology environments.

Key Responsibilities

• Security Architecture and Engineering - Conduct secure architecture and design reviews across the bank 's technology infrastructure and business applications. - Assess cybersecurity controls supporting core banking platforms, financial transaction systems and payment infrastructure. - Review security architecture for UAE payment systems, including UAEFTS, Instant Payment Platform (IPP) and Aani. - Evaluate security requirements for card switching platforms, SWIFT infrastructure, ATM networks and branch connectivity. - Review security controls across enterprise data platforms, digital banking applications and mobile banking channels. - Assess the security architecture of open finance APIs and connected financial services.
• Zero Trust and Network Segmentation - Drive the implementation and enhancement of zero trust security principles across enterprise infrastructure. - Define network segmentation requirements for data centres, branches and ATM networks. - Review security boundaries between internal networks, cloud environments and third- party connections. - Support appropriate network segmentation for operational technology and building management systems where applicable. - Evaluate network access controls and recommend improvements to reduce unauthorized access and lateral movement risks. - Coordinate with infrastructure and network teams to strengthen enterprise security architecture.
• Identity and Privileged Access Security - Define and assess identity security controls across enterprise IT systems and business applications. - Support Active Directory security hardening and identity infrastructure protection. - Review Identity and Access Management (IAM) configurations and access control practices. - Evaluate Privileged Access Management (PAM) controls, including technologies such as CyberArk. - Identify weaknesses in privileged access arrangements and recommend appropriate remediation. - Support consistent application of identity security requirements across relevant technology environments.
• Endpoint, Network and Data Protection - Engineer, configure and optimize Endpoint Detection and Response (EDR) and Extended Detection and Response (XDR) capabilities. - Support endpoint and server protection using technologies such as CrowdStrike Falcon and Microsoft Defender. - Review and tune Web Application Firewall (WAF) security controls. - Evaluate Data Loss Prevention (DLP) capabilities and associated protection requirements. - Strengthen email and collaboration platform security controls. - Review firewall and next-generation firewall configurations. - Recommend appropriate encryption standards and security practices. - Provide technical guidance on Hardware Security Modules (HSMs) and cryptographic key management.
• Application Security and DevSecOps - Integrate Static Application Security Testing (SAST), Dynamic Application Security Testing (DAST) and Software Composition Analysis (SCA) into CI/CD pipelines. - Define security quality gates and vulnerability triage processes for development teams. - Assess applications against the OWASP Top 10 security risks. - Evaluate APIs against the OWASP API Security Top 10. - Perform and guide secure code reviews for high-risk application changes. - Coordinate with development teams to identify and address application security weaknesses. - Define security baselines for microservices and containerized application environments. - Establish security requirements for Kubernetes platforms, including container image scanning, secrets management and runtime protection. - Support secure software delivery through practical DevSecOps controls and processes.
• Cybersecurity Monitoring and Detection Engineering - Apply SIEM technologies such as Splunk, IBM QRadar and Microsoft Sentinel to support security monitoring and analysis. - Develop and use security queries with Search Processing Language (SPL), Kusto Query Language (KQL) and Ariel Query Language (AQL). - Support security orchestration and automation through SOAR technologies. - Apply EDR and XDR investigation techniques to identify suspicious endpoint and server activity. - Perform malware triage and support technical investigation of security events. - Use the MITRE ATT&CK framework to understand adversary techniques and strengthen detection capabilities. - Develop detection logic using Sigma and YARA rules. - Support threat hunting activities through log analysis and security telemetry. - Analyse Windows event logs, Sysmon data, Linux logs and relevant network security records. - Investigate firewall, proxy and DNS logs to identify potential security threats. - Use network traffic analysis tools, including Wireshark, Zeek and Network Detection and Response (NDR) platforms. - Apply memory and disk forensics fundamentals using tools such as Volatility and KAPE. - Work with threat intelligence platforms such as MISP and relevant security case management systems.
• Cloud Security Engineering - Review security configurations across Microsoft Azure and AWS environments. - Apply Cloud Security Posture Management (CSPM) tools to identify configuration weaknesses and cloud security risks. - Evaluate security controls protecting cloud-hosted applications and infrastructure. - Support secure identity, access and network configurations across hybrid cloud environments. - Assess cloud security requirements in accordance with applicable enterprise standards and regulatory obligations. - Coordinate cloud security improvements with infrastructure and application teams.
• Cybersecurity Governance, Risk and Compliance - Maintain alignment between cybersecurity controls and applicable Central Bank of the UAE (CBUAE) information security and technology risk requirements. - Apply the UAE Information Assurance Standards, formerly associated with NESA. - Support compliance with the UAE Personal Data Protection Law, Federal Decree-Law No. 45 of 2021. - Review applicable security requirements under the CBUAE Open Finance Regulation. - Support adherence to Payment Card Industry Data Security Standard (PCI DSS) requirements. - Assess relevant controls against the SWIFT Customer Security Programme (CSP). - Map cybersecurity controls to ISO/IEC 27001 and the NIST Cybersecurity Framework. - Support the review and maintenance of cybersecurity policies, technical standards and control requirements. - Conduct cybersecurity risk assessments covering infrastructure, applications and technology services. - Perform third-party and vendor security assessments to identify potential cybersecurity exposures. - Document security findings and recommend appropriate risk mitigation measures.

Educational Qualifications

Bachelor 's degree in Computer Science, Information Technology, Cybersecurity or an equivalent discipline.

Professional Experience

• Minimum 8 years of professional experience in cybersecurity.
• At least 3 years of cybersecurity experience within banking or financial services.
• Experience in GCC or UAE banking environments is preferred.
• Strong technical background in cybersecurity architecture, engineering and security control implementation.
• Practical knowledge of enterprise security technologies, application security and infrastructure protection.
• Understanding of cybersecurity regulatory requirements affecting financial institutions.

Mandatory Professional Certifications

• Certified Information Systems Security Professional (CISSP).
• Certified Information Security Manager (CISM).
• Offensive Security Certified Professional (OSCP).

Preferred Professional Certifications

• GIAC Certified Incident Handler (GCIH).
• GIAC Certified Intrusion Analyst (GCIA).
• GIAC Certified Forensic Analyst (GCFA).
• GIAC Penetration Tester (GPEN).
• Splunk Core Certified or Splunk Enterprise Security certification.
• Microsoft SC-200: Security Operations Analyst.
• CompTIA Cybersecurity Analyst (CySA ).
• Blue Team Level 1 (BTL1) or Blue Team Level 2 (BTL2).
• Certified Ethical Hacker (CEH).
• Certified Cloud Security Professional (CCSP).
• Microsoft Azure security certifications.
• AWS security certifications.
• ISO/IEC 27001 Lead Implementer or Lead Auditor.
• Certified in Risk and Information Systems Control (CRISC).

Required Technical Competencies

• Security Monitoring and Investigation - SIEM platforms, including Splunk, IBM QRadar and Microsoft Sentinel.
• SPL, KQL and AQL security query languages.
• SOAR automation and security workflow integration.
• EDR and XDR investigations.
• Malware triage and security event analysis.
• Threat hunting and detection engineering.
• MITRE ATT&CK framework.
• Sigma and YARA detection rule development.
• Windows, Sysmon and Linux security log analysis.
• Firewall, proxy, DNS and network log investigation.
• Network and Endpoint Security - CrowdStrike Falcon and Microsoft Defender.
• Enterprise firewalls and next-generation firewalls.
• Wireshark and Zeek network analysis.
• Network Detection and Response technologies.
• Zero trust architecture and network segmentation.
• Web Application Firewall security.
• Data Loss Prevention controls.
• Email and collaboration security.
• Identity and Cloud Security - Active Directory security hardening.
• Identity and Access Management.
• Privileged Access Management, including CyberArk.
• Microsoft Azure and AWS security.
• Cloud Security Posture Management.
• Encryption standards and cryptographic key management.
• Hardware Security Modules.
• Application and Infrastructure Security - SAST, DAST and SCA security testing.
• Secure CI/CD pipelines and DevSecOps practices.
• OWASP Top 10 and OWASP API Security Top 10.
• Secure code review.
• Microservices and container security.
• Kubernetes security baselines.
• Container image scanning.
• Secrets management and runtime protection.
• Security Automation and Forensics - Python scripting and automation.
• PowerShell scripting.
• Memory and disk forensics fundamentals.
• Volatility and KAPE.
• Threat intelligence platforms such as MISP.
• Security case management tools, including ServiceNow SecOps and TheHive.
• Regulatory and Security Framework Knowledge - CBUAE information security and technology risk regulations.
• UAE Information Assurance Standards.
• UAE Personal Data Protection Law.
• CBUAE Open Finance Regulation.
• PCI DSS.
• SWIFT Customer Security Programme.
• ISO/IEC 27001.
• NIST Cybersecurity Framework.

Professional Capabilities

• Strong analytical and technical problem-solving skills.
• Ability to assess complex enterprise security architectures and identify weaknesses.
• Practical understanding of cybersecurity risks affecting banking infrastructure and payment systems.
• Ability to evaluate and strengthen security controls across on-premises and cloud environments.
• Strong technical investigation and security monitoring capabilities.
• Ability to communicate security findings and recommendations to relevant technical and business stakeholders.
• Understanding of cybersecurity governance, regulatory compliance and third-party risk assessment.
• Ability to coordinate security improvements across infrastructure, application development and security teams.

Role Expectations

The Senior Cybersecurity Architect and Engineer will contribute to the protection of critical banking infrastructure, financial applications, digital channels and enterprise technology services. The role requires a combination of security architecture expertise, hands-on engineering capabilities, application security knowledge and regulatory awareness. The successful candidate will support the development and assurance of security controls across banking systems, cloud environments, networks, endpoints and applications while helping maintain alignment with applicable cybersecurity regulations and industry frameworks.