Senior Security Engineer

TAT IT Technolgies; Abu Dhabi; On-site; AED 250,000 - 360,000; Full time

Job summary

TAT IT Technolgies in Abu Dhabi requires a Senior Security Engineer with deep expertise in secure application and infrastructure design. You will lead penetration testing across web, mobile, and APIs, drive security automation within CI/CD, and shape cloud security architecture for AWS and Azure.

Strong collaboration with development, DevOps, and leadership is essential. You will design and implement secure coding reviews, threat modeling, and risk assessments, while mentoring teams and

Qualifications

• 7–12 years of professional information security experience.
• Hands-on in web, mobile, and API pentesting.
• Experience with SAST, DAST, SCA, IaC, and container scanning tooling.
• Strong DevSecOps knowledge and CI/CD security.
• Cloud security expertise in AWS and Azure.
• Knowledge of Kubernetes, Docker, and container runtime security.
• Scripting skills (Python, Bash) for security workflows.
• Excellent stakeholder communication and collaboration.

Responsibilities

• Conduct penetration testing across web, mobile, and APIs.
• Perform secure code reviews to remediate vulnerabilities.
• Configure and manage results from SAST, DAST, SCA, IaC, and container scanners.
• Drive DevSecOps and security automation in CI/CD pipelines.
• Enhance security posture of Kubernetes and container runtimes.
• Contribute to security architecture and risk reviews for apps and cloud.
• Lead threat modeling, risk assessments, and end-to-end vulnerability mgmt.
• Deliver security training and best-practice workshops.
• Partner with Dev, Ops, and Infra teams for secure delivery.
• Translate technical risks into actionable guidance for stakeholders.
• Participate in incident response and post-incident reviews.
• Stay updated on threats and new security technologies.

Skills

Penetration testing

Security architecture

DevSecOps

Threat modeling

Vulnerability assessment

Cloud security

AWS

Azure

SAST

DAST

SCA

IaC

Container security

Kubernetes

Python

Bash scripting

CI/CD

Security automation

Communication

Tools

SAST tools

DAST tools

SCA tools

IaC scanners

Container scanners

Job description

We have an urgent requirement for Senior Security Engineer for our banking clients in Abu Dhabi ,UAE

• Strong experience on API penetration testing(OWASP Top 10) and vulnerability assessments is MUST
• Strong experience Security architecture, application, infrastructure and cloud security Must
• Strong experience in Security Automation & Continuous Validation – DevsecOPS, CI/CD-based, always-on security testing pipelines--Must
• Strong experience in Threat Modeling & Risk Assessment Must
• linking detection (SAST, pentests DAST, SCA, IaC, and Container) with prevention and remediation.
• Position Overview: We are seeking an experienced Security Engineer with 7–12 years of expertise in application, infrastructure, and cloud security. The ideal candidate will bring hands-on experience in penetration testing, DevSecOps practices, cloud security (AWS & Azure), and security architecture. You will play a pivotal role in fostering a robust security culture, driving awareness, and seamlessly integrating security practices across multiple cross-functional teams.

Responsibilities

• Conduct penetration testing across web applications, mobile applications, and APIs.
• Execute secure code reviews to identify and remediate vulnerabilities in application code, scripts, and configurations.
• Configure, optimize, and manage results from SAST, DAST, SCA, IaC, and container scanning tools.
• Drive DevSecOps initiatives, emphasizing security automation within CI/CD pipelines.
• Enhance the security posture of Kubernetes, container runtimes, and the underlying infrastructure.
• Contribute to security architecture design and conduct risk reviews for applications, cloud environments, and infrastructure.
• Lead threat modeling, risk assessments, and end-to-end vulnerability management.
• Promote security awareness by establishing and delivering training sessions and best-practice workshops.
• Partner with development, DevOps, and infrastructure teams to guarantee secure design and delivery.
• Act as a trusted security advisor, translating complex technical risks into actionable recommendations for non-technical stakeholders.
• Participate in incident response, conduct post-incident reviews, and ensure lessons learned are implemented.
• Stay continuously updated on emerging threats, modern attack vectors, and innovative security technologies.

Experience & Soft Skills

• 7–12 years of professional experience in information security roles.
• Proven hands-on expertise in web, mobile, and API penetration testing.
• Proficiency with application and infrastructure security tooling (SAST, DAST, SCA, IaC, and container scanning).
• Deep understanding of DevSecOps principles, CI/CD pipeline security, and security automation frameworks.
• Strong knowledge of cloud security best practices, specifically within AWS & Azure.
• Solid grasp of Kubernetes, Docker, container runtime security, and secure architecture design principles.
• Proficient scripting skills (e.g., Python, Bash) to build and automate security workflows.
• Strong analytical and problem-solving mindset.
• Excellent communication and stakeholder management skills, with the ability to articulate technical risks clearly to non-technical audiences.
• Highly collaborative approach when working with development, DevOps, product, and leadership teams.
• Passion for continuous learning and championing a company-wide culture of security.

Good to Have

• Recognized industry certifications (e.g., OSCP, OSWE, OSEP, CISSP, CCSP, CKS, CKA).
• Exposure to prominent GRC frameworks (ISO 27001, SOC 2, NIST, CIS).
• Familiarity with global privacy and compliance regulations (GDPR, PCI DSS, HIPAA).

Skills: sast,bank,security