Senior Lead, Information Security - Cloud & AppSec (UAE)

تابي; Dubai; On-site; AED 480,000 - 720,000; Full time

Job summary

Tabby is seeking a Senior Lead, Information Security to shape Tabby’s security program across strategy and hands-on technical work. You will own cloud security, secure software development, vulnerability management and incident response, while mentoring a team of engineers.

The role requires 5+ years in information security, strong leadership, and deep knowledge of GCP/AWS, IAM, CSPM, SIEM, and vulnerability management within a regulated FinTech context.

Qualifications

• Minimum 5+ years in Information Security or Cybersecurity, including leadership experience.
• Experience leading information security programmes and cross-functional initiatives.
• Deep expertise across cloud security, security architecture, VAPT, AppSec/DevSecOps and defensive security.
• Strong knowledge of GCP/AWS, IAM, CSPM, SIEM, EDR/XDR and vulnerability management.
• Experience with SAST, DAST, SCA and container security within CI/CD environments.
• Understanding of security architecture, threat modelling and enterprise security controls.
• Experience in regulated FinTech or banking environments.
• Knowledge of UAE regulations (CBUAE, UAE PDPL) and standards (PCI-DSS, ISO 27001, SOC 2).
• CISSP/CISM and OSCP or equivalent certifications are preferred/required.

Responsibilities

• Lead and contribute hands-on to security architecture and technical security reviews across cloud, infrastructure and product initiatives.
• Design and implement security controls across GCP and AWS, including IAM, CSPM and cloud-native security.
• Drive and contribute to Secure SDLC / DevSecOps, including SAST, DAST, SCA and container security.
• Lead vulnerability management and participate in penetration testing, VAPT and red/purple team engagements.
• Design and improve threat detection, SIEM use cases and security monitoring.
• Lead investigations and response to complex security incidents.
• Drive endpoint, infrastructure, network and firewall security initiatives.
• Automate security processes and develop security tooling where needed.
• Establish technical standards, security best practices and SOPs.
• Support and mentor a team of security engineers and analysts.
• Work with Engineering, IT, Legal and Compliance to embed security across Tabby.

Skills

Information Security leadership

5+ years in security

Cloud security

GCP/AWS

Vulnerability management

Threat detection & incident response

SAST/DAST/SCA

CI/CD security

Regulated FinTech experience

Security architecture

CISSP/CISM/OSCP preferred

Tools

GCP

AWS

IAM

CSPM

SIEM

EDR/XDR

Job description

Tabby is seeking a Senior Lead, Information Security to shape Tabby’s security program across strategy and hands-on technical work. You will own cloud security, secure software development, vulnerability management and incident response, while mentoring a team of engineers.

The role requires 5+ years in information security, strong leadership, and deep knowledge of GCP/AWS, IAM, CSPM, SIEM, and vulnerability management within a regulated FinTech context.