Senior Data Security & Cryptography Specialist

Birbal AI; Abu Dhabi; On-site; AED 180,000 - 280,000; Full time

Job summary

Birbal AI in Abu Dhabi is seeking a Senior Data Security & Cryptography Specialist to assess and strengthen data protection, encryption, key management, and cryptographic controls across applications, databases, APIs, cloud platforms, and enterprise systems.

You will review PKI, TLS, HSM, secrets management, data masking, and ensure secure data-at-rest and in-transit across a large-scale digital platform, documenting findings and remediation recommendations for technical and non-technical

Qualifications

• 7+ years of experience in data security, cryptography, or security engineering.
• Practical knowledge of encryption, PKI, TLS, and key-management controls.
• Experience with cloud-native data protection and secrets management.
• Ability to document findings and present to technical/non-technical stakeholders.
• Skilled in data classification and access-control architectures.

Responsibilities

• Assess data security architecture across applications, databases, APIs, integrations, cloud platforms, and infrastructure.
• Review encryption, key management, and cryptographic controls for weaknesses and remediation.
• Prepare technical findings, risk assessments, remediation recommendations, and security documentation.
• Support remediation and validate effectiveness of implemented data-security and cryptographic controls.

Skills

Data security

Cryptography

Information security

Security engineering

Encryption

Key management

HSM

Secrets management

PKI

TLS/SSL

Data masking

Access controls

Documentation

Risk assessment

Tools

HSM

KMS

Job description

We are looking for an experienced Senior Data Security & Cryptography Specialist to assess and strengthen data protection, encryption, key management, secrets management, and cryptographic controls across applications, databases, APIs, cloud platforms, and enterprise systems supporting a large-scale digital platform.

Qualifications

• Assess data security architecture and controls across applications, databases, APIs, integrations, cloud platforms, and infrastructure.
• Review protection of sensitive data at rest, in transit, and where applicable, in use.
• Assess implementation of encryption, hashing, tokenization, masking, and key-management controls.
• Review PKI, certificates, TLS configurations, cryptographic protocols, algorithms, and cipher suites.
• Assess Key Management Systems (KMS), Hardware Security Modules (HSM), and secrets-management solutions.
• Identify weak or outdated cryptographic implementations and recommend appropriate remediation.
• Review key lifecycle management, including generation, storage, distribution, rotation, revocation, backup, and destruction.
• Evaluate data-access controls and protection mechanisms for sensitive and regulated information.
• Support remediation and validate the effectiveness of implemented data-security and cryptographic controls.
• Prepare technical findings, risk assessments, remediation recommendations, and security documentation.

Required experience:

• 7+ years of relevant experience in Data Security, Cryptography, Information Security, or Security Engineering.
• Strong practical knowledge of:

Encryption and cryptographic controls

PKI and digital certificates

TLS/SSL

Key Management Systems

HSM

Secrets management

Tokenization and data masking

Data-at-rest and data-in-transit protection

• Understanding of cloud-native data protection and key-management services.
• Experience assessing cryptographic implementations and identifying weak algorithms, protocols, keys, or configurations.
• Strong understanding of data classification, sensitive-data protection, access controls, and security architecture.
• Strong technical documentation and reporting skills.
• Ability to communicate findings effectively to technical and non-technical stakeholders.