Senior Information Security Lead - Cloud AppSec Strategy

تابي; United Arab Emirates; On-site; AED 400,000 - 700,000; Full time

Job summary

Tabby is hiring a Senior Lead, Information Security in the UAE to steer its security program across cloud, application and infrastructure domains. You will own security reviews, design controls for GCP/AWS, and advance Secure SDLC, vulnerability management and incident response.

You will mentor security engineers, collaborate with Engineering, IT, Legal and Compliance, and ensure Tabby's security posture meets regulatory FinTech standards.

Qualifications

• 5+ years in information security with leadership experience.
• Deep expertise across Cloud Security, Security Architecture, VAPT, AppSec/DevSecOps and Defensive Security.
• Strong knowledge of GCP/AWS, IAM, CSPM, SIEM, EDR/XDR and vulnerability management.
• Experience leading security programmes and managing cross-functional initiatives.
• Knowledge of regulatory FinTech environments and standards such as PCI-DSS, ISO 27001 and SOC 2.
• CISSP/CISM and OSCP or equivalent certifications are preferred/required.

Responsibilities

• Lead and contribute hands-on to security architecture and technical security reviews across cloud, infrastructure and product initiatives.
• Design and implement security controls across GCP and AWS, including IAM, CSPM and cloud-native security.
• Drive and contribute to Secure SDLC / DevSecOps, including SAST, DAST, SCA and container security.
• Lead vulnerability management and actively participate in penetration testing, VAPT and red/purple team engagements.
• Design and improve threat detection, SIEM use cases and security monitoring.
• Lead and participate in complex security incident investigations and response.
• Drive endpoint, infrastructure, network and firewall security initiatives.
• Automate security processes and develop security tooling where needed.
• Establish technical standards, security best practices and operating procedures.
• Support and mentor a team of security engineers and analysts.
• Work closely with Engineering, Infrastructure, Product, IT, Legal and Compliance teams to embed security across Tabby.

Skills

Cloud Security

Security Architecture

VAPT

AppSec/DevSecOps

Threat Detection

Incident Response

CSPM

IAM

SIEM

GCP/AWS

Threat Modelling

Regulated FinTech

Stakeholder Management

CISSP/CISM/OSCP

Job description

Tabby is hiring a Senior Lead, Information Security in the UAE to steer its security program across cloud, application and infrastructure domains. You will own security reviews, design controls for GCP/AWS, and advance Secure SDLC, vulnerability management and incident response.

You will mentor security engineers, collaborate with Engineering, IT, Legal and Compliance, and ensure Tabby's security posture meets regulatory FinTech standards.