Senior Manager – Cyber Security Engineer

TAT IT Technolgies; Abu Dhabi; On-site; AED 400,000 - 640,000; Full time

Job summary

TAT IT Technolgies in Abu Dhabi is seeking a Senior Manager – Cyber Security Engineer with banking-domain expertise to drive automated adversarial security validation across cloud, applications, and AI/LLM systems. Lead threat-informed testing, remediation governance, and continuous control validation.

You will collaborate across DevSecOps, establish automated gates, and deliver executive security dashboards in Power BI while maintaining a strict 1LoD/2LoD structure.

Qualifications

• Strong experience in offensive security, penetration testing, adversarial simulation, blue-team validation, and continuous security validation.
• Proven experience transitioning organisations from periodic manual penetration testing to automated/continuous security control validation.
• Hands-on experience with autonomous penetration-testing platforms such as AWS Security Agent, Horizon3.ai, or equivalent.
• Strong expertise in AI/LLM security and AI red teaming, including Garak, PyRIT, Claude Security/Opus, Codex, or comparable tooling.
• Strong knowledge of OWASP LLM Top 10 and MITRE ATLAS.
• Experience integrating security validation into CI/CD and DevSecOps pipelines.
• Experience with DefectDojo, Jira automation, vulnerability management, security metrics, and Power BI.
• Strong understanding of cloud security, AWS security controls, application security, threat modelling, and adversarial testing.
• Strong understanding of 1LoD/2LoD governance, control validation, independent assurance, and security risk management.

Responsibilities

• Lead continuous AI/LLM security validation using automated platforms and integrate testing into CI/CD pipelines.
• Design tests for prompt injection, jailbreaks, data leakage, excessive agency, insecure tool use, model manipulation, and supply-chain risks.
• Develop executive dashboards (Power BI) covering open findings, MTTR, gate pass rate and remediation SLA compliance.
• Establish automated security gates to prevent deployment when critical controls fail.
• Drive end-to-end finding lifecycle management from discovery through remediation, validation, attestation, and closure.
• Maintain 1LoD/2LoD operating model with independent assurance and blue-team validation.

Skills

Offensive security

Blue-team validation

Adversarial testing

CI/CD integration

AWS security

AI/LLM security

Threat modelling

Jira automation

Power BI

Vulnerability management

DefectDojo

Tools

AWS Security Agent

Garak

PyRIT

Claude Security/Opus 4.x

Codex

Job description

We have an urgent requirement for Senior Manager – Cyber Security Engineer with experience in banking domain is required for our clients in Abu Dhabi ,UAE

Strong Experience On AI/LLM Model And Supply Chain Model

Strong experience on AWS Security Agent (cloud/infra)

Strong experience in AI/LLM Security & Red Teaming – prompt injection, model attacks, OWASP LLM + MITRE ATLAS exposure.--

Must

Strong experience Garak, PyRIT, Claude Security / Opus 4.x, Codex, 1LoD/2LoD

Strong experience in Threat Intel to Test Engineering – convert MITRE/OWASP intel into automated attack test cases within strict SLAs --- Must

Role Purpose

Lead the organisation’s transition from periodic, manual penetration testing to continuous, automated adversarial security validation across cloud infrastructure, applications, AI/LLM systems, and model supply chains. The role will own continuous control validation, threat-informed security testing, vulnerability orchestration, and remediation governance while maintaining a clear 1LoD/2LoD operating model.

Key Responsibilities

• Continuous Security Validation
• Design and operate continuous security validation across AWS cloud/infrastructure, applications, AI/LLM workloads, and model supply chains.
• Integrate autonomous security testing tools such as AWS Security Agent, Horizon3.ai, or equivalent platforms into CI/CD pipelines.
• Execute automated adversarial tests against significant deployments based on a 2LoD-approved threat coverage matrix.
• Establish automated security gates to prevent deployment where critical security controls fail.
• Threat Intelligence & Adversarial Testing
• Own the 7-day threat-intelligence operationalisation SLA.
• Monitor MITRE ATLAS, OWASP LLM Top 10, and other relevant threat-intelligence sources.
• Use Jira automation and security engineering workflows to translate emerging attack techniques into repeatable security test cases within seven days.
• Develop and maintain adversarial test scenarios covering cloud, application, AI/LLM, prompt-injection, model-abuse, and model-supply-chain risks.
• AI / LLM Security & Red Teaming
• Lead continuous AI security validation using tools such as Garak, PyRIT, Claude Security/Opus 4.x, Codex, or equivalent platforms.
• Design tests for prompt injection, jailbreaks, data leakage, excessive agency, insecure tool use, model manipulation, and supply-chain risks.
• Continuously measure and improve Prompt Injection Block Rate and other AI security control effectiveness metrics.
• Vulnerability & Finding Management
• Aggregate, deduplicate, prioritise, and SLA-manage security findings through DefectDojo.
• Establish severity-based MTTR remediation gates and ensure remediation evidence is validated before re-deployment approval.
• Drive end-to-end finding lifecycle management from discovery through remediation, validation, attestation, and closure.
• Security Metrics & Governance
• Develop executive-level Power BI dashboards covering:
• Open Findings
• MTTR
• Pipeline Gate Pass Rate
• Prompt Injection Block Rate
• Security Control Effectiveness
• Threat Coverage
• Remediation SLA Compliance
• Provide management-level reporting on security posture, control effectiveness, emerging threats, and remediation performance.
• 1LoD / 2LoD Operating Model
• Maintain a clear separation between 1LoD control validation and independent 2LoD security assurance/red teaming.
• Execute blue-team control validation against 2LoD-approved threat scenarios and test coverage.
• Ensure independent unknown-scenario testing remains within the 2LoD remit to preserve appropriate challenge and assurance independence.

Required Technical Expertise

• Strong experience in offensive security, penetration testing, adversarial simulation, blue-team validation, and continuous security validation.
• Proven experience transitioning organisations from periodic manual penetration testing to automated/continuous security control validation.
• Hands-on experience with autonomous penetration-testing platforms such as AWS Security Agent, Horizon3.ai, or equivalent.
• Strong expertise in AI/LLM security and AI red teaming, including Garak, PyRIT, Claude Security/Opus, Codex, or comparable tooling.
• Strong knowledge of OWASP LLM Top 10 and MITRE ATLAS.
• Experience integrating security validation into CI/CD and DevSecOps pipelines.
• Experience with DefectDojo, Jira automation, vulnerability management, security metrics, and Power BI.
• Strong understanding of cloud security, AWS security controls, application security, threat modelling, and adversarial testing.
• Strong understanding of 1LoD/2LoD governance, control validation, independent assurance, and security risk management.

Skills: manager,security,cybersecurity