Senior Product Security Architect & DevSecOps Leader

AMD CyberSec; Dubai; On-site; AED 420,000 - 540,000; Full time

Job summary

AMD seeks a Principal Product Security Engineer to design, build, test, and implement secure SDLC across the product development lifecycle. You will lead security by design in a cloud-centric environment and collaborate with product teams to embed resilient security practices.

The role requires deep knowledge of secure coding, application security testing, and experience with PKI, OWASP Top10, and risk-based reviews.

Qualifications

• Master’s degree in computer science or cyber security, or equivalent demonstrated experience.
• Minimum 7+ years of engineering or software development experience.
• Minimum 5 years in a product security role in cloud and application security.
• Strong knowledge of software technologies (C/C++, Java, .Net, Python).
• Experience with SAST, DAST, SCA and penetration testing.
• Experience with Azure cloud.
• Experience with DISA STIGS and CIS benchmarks for OS hardening.
• Understanding of secure SDLC and Agile methodologies.
• Knowledge of PKI and OWASP Top10.
• Experience with threat modeling and security audits.

Responsibilities

• Define security by design in the Application Security Program mandates and work with product teams.
• Develop design patterns and code guidelines that meet security requirements.
• Be a thought leader and drive security solutions across the organization.
• Drive feature implementations with designs, reviews and tests; perform POC activities as needed.
• Lead DevSecOps with SAST, DAST, SCA and penetration test results with developers.
• Review current security controls and implement enhancements for cloud products.
• Participate in vulnerability investigations and support the Security Operations team.

Job description

AMD seeks a Principal Product Security Engineer to design, build, test, and implement secure SDLC across the product development lifecycle. You will lead security by design in a cloud-centric environment and collaborate with product teams to embed resilient security practices.

The role requires deep knowledge of secure coding, application security testing, and experience with PKI, OWASP Top10, and risk-based reviews.