Senior Security Engineer

SDD; Sharjah; On-site; AED 180,000 - 280,000; Full time

Job summary

SDD is seeking an experienced cybersecurity professional in Sharjah, UAE to lead source code reviews, perform VAPT, and investigate security incidents. The role requires strong coding knowledge and hands-on experience with security technologies, while collaborating with development teams to remediate vulnerabilities.

Ideal candidates hold a Bachelor’s in CS/IT/Cyber Security and 7+ years of relevant experience, plus certifications like CISSP/CEH/OSCP.

Qualifications

• Bachelor’s degree in computerscience, Information Technology, Cyber Security, or a related field.
• 7+ years of experience in cyber security, specifically in source code review and VAPT.
• Strong knowledge of programming languages, specifically Java, Swift, and .net.
• Familiarity with various security frameworks and standards.
• Excellent problem-solving skills and a keen eye for detail.
• Strong communication skills, capable of effectively articulating complex technical concepts to non-technical stakeholders.
• Relevant professional certifications such as CISSP, CEH, OSCP, or similar are preferred.
• Good understanding of security technologies including firewalls, proxies, SIEM, antivirus software, and IDPS etc.
• Good knowledge of penetration testing, network security, and the techniques used to expose & correct security flaws.
• Good knowledge of scripting, hacking, networking, and operating systems are a must.
• Good knowledge of managing, installing, and operating security related software’s.
• Arabic speakers are a plus.
• Knowledge of white-box testing is a plus.

Responsibilities

• Conduct thorough source code reviews to identify potential security vulnerabilities and ensure compliance with security best practices.
• Investigate security breaches and cybersecurity incidents.
• Perform Vulnerability Assessment and Penetration Testing (VAPT) on various applications and systems.
• Use advanced analytic tools to determine emerging threat patterns and vulnerabilities.
• Work closely with software development team to communicate potential security vulnerabilities and provide remediation recommendations.
• Maintain up-to-date knowledge of the latest cyber security threats, trends, and technologies.
• Develop and maintain documentation related to security assessments, discoveries, and remediation activities.
• Collaborate with cross-functional teams to develop and implement effective security policies and practices across the organization.
• Monitor identity and access management, including monitoring for abuse of permissions by authorized system users.
• Perform ethical hacking as and when required.
• Conduct threat and risk analysis on a regular basis and provide viable solutions for them.
• Design secure principles, develop security features, actively participate in security architecture reviews, and optimize new technology services.

Skills

VAPT experience

Threat analysis

Code review

Penetration testing

Communication skills

Scripting

Networking

Education

Bachelor's degree in CS/IT/Cyber Security

Tools

SIEM

Firewalls

IDS/IPS

Proxies

Antivirus

Job description

Job Description:

Dutiesand Responsibilities

• 1. Conduct thorough source codereviews to identify potential security vulnerabilities and ensure compliancewith security best practices.
• 2. Investigating securitybreaches and other cybersecurity incidents.
• 3. Perform VulnerabilityAssessment and Penetration Testing (VAPT) on various applications and systems.
• 4. Use advanced analytic tools todetermine emerging threat patterns and vulnerabilities.
• 5. Work closely with the softwaredevelopment team to communicate potential security vulnerabilities and providerecommendations for remediation.
• 6. Maintain up-to-date knowledgeof the latest cyber security threats, trends, and technologies.
• 7. Develop and maintaindocumentation related to security assessments, discoveries, and remediationactivities.
• 8. Collaborate withcross-functional teams to develop and implement effective security policies andpractices across the organization.
• 9. monitor identity and accessmanagement, including monitoring for abuse of permissions by authorized systemusers.
• 10. Perform ethical hacking as andwhen required.
• 11. Conduct threat and riskanalysis on a regular basis and provide viable solutions for them.
• 12. Design secure principles,develop security features, actively participate in security architecturereviews, and optimize new technology services.

CandidateRequirements

• 1. Bachelor’s degree in computerscience, Information Technology, Cyber Security, or a related field.
• 2. 7+ years of experience incyber security, specifically in source code review and VAPT.
• 3. Strong knowledge ofprogramming languages, specifically Java, Swift, and .net.
• 4. Familiarity with varioussecurity frameworks and standards.
• 5. Excellent problem-solvingskills and a keen eye for detail.
• 6. Strong communication skills,capable of effectively articulating complex technical concepts to non-technicalstakeholders.
• 7. Relevant professionalcertifications such as CISSP, CEH, OSCP, or similar are preferred.
• 8. Good understanding of securitytechnologies including firewalls, proxies, SIEM, antivirus software, and IDPsetc.
• 9. Good knowledge of penetrationtesting, network security, and the techniques used to expose & correctsecurity flaws.
• 10. Agood knowledge of scripting, hacking, networking, and operating systems are amust.
• 11. Good knowledge of managing,installing, and operating security related software’s.
• 12. Arabicspeakers are a plus.
• 13. Knowledgeof white-box testing is a plus.

Requirements: