Senior InfoSec Leader: Cloud Security & Secure SDLC

Tabby | تابي; United Arab Emirates; On-site; AED 360,000 - 480,000; Full time

Job summary

Tabby is seeking a Senior Manager Information Security in the UAE to lead and shape the information security function across strategic and technical domains. You will head a team of security professionals, own key programmes in cloud security, architecture, vulnerability management, threat detection and incident response.

Responsibilities include security architecture reviews, cloud security controls in AWS/GCP, Secure SDLC, vulnerability management, incident response, and collaboration with

Qualifications

• Extensive leadership of Information/Cyber Security functions.
• 5+ years in Information Security with a tech leadership role.
• Deep expertise across Cloud Security, Security Architecture, VAPT, AppSec/DevSecOps and Defensive Security.
• Experience with cross-functional security programs and stakeholder management.

Responsibilities

• Lead security architecture reviews across cloud, infrastructure and product initiatives.
• Design and implement security controls in GCP and AWS (IAM, CSPM, security).
• Drive Secure SDLC / DevSecOps (SAST, DAST, SCA, container security).
• Lead vulnerability management, participate in pen tests and red/purple team engagements.
• Improve threat detection, SIEM use cases and monitoring.
• Lead complex security incident investigations and response.
• Drive endpoint, network and firewall security initiatives.
• Automate security processes and create security tooling.
• Establish technical standards and operating procedures.
• Mentor and develop security engineers and analysts.
• Collaborate with Eng, Infra, Product, IT, Legal and Compliance to embed security.

Skills

Security leadership

Cloud security

Security architecture

DevSecOps

VAPT

Incident response

SIEM

Threat detection

Regulated FinTech

Team leadership

Tools

GCP

AWS

CI/CD tooling

EDR/XDR

Job description

Tabby is seeking a Senior Manager Information Security in the UAE to lead and shape the information security function across strategic and technical domains. You will head a team of security professionals, own key programmes in cloud security, architecture, vulnerability management, threat detection and incident response.

Responsibilities include security architecture reviews, cloud security controls in AWS/GCP, Secure SDLC, vulnerability management, incident response, and collaboration with