Senior Security Engineer — Build Our First Security Function

Aleroy; Abu Dhabi; On-site; AED 300,000 - 600,000; Full time

Benefits offered by this job

24 days annual leave

Health insurance

Modern office in Yas Creative Hub

Job summary

Aleroy in Abu Dhabi is seeking its first dedicated security engineer to design, test and harden a multi-tenant cloud platform. You will review features, run tests, and drive security practices across engineering, with reporting to the COO and close collaboration with the CTO.

Our role focuses on threat modelling, cloud and production access controls, data handling and audits for ISO 27001 and SOC 2. You’ll need hands-on testing skills and a track record securing SaaS platforms.

Qualifications

• 6 to 10 years in security, with most of it in application security or cloud security.
• Hands-on testing skills: code review, API and web application testing, cloud configuration review.
• Deep experience with at least one major cloud provider, and with containers and Kubernetes or similar.
• You have secured a multi-tenant SaaS or platform product.
• You have implemented security controls that went through an ISO 27001 or SOC 2 audit, and you can show the evidence they produced.
• You have worked in a startup or scale-up, ideally as the first or an early security hire.
• You say clearly when something is not safe, explain the risk in business terms, and bring a practical fix.
• You work well with engineers: you review and challenge their work and still keep their trust.
• Clear written English. Your findings and reports can go straight to a customer or an auditor.

Responsibilities

• Threat modelling and design review of new features and architecture changes before they ship.
• Security testing of applications, APIs and cloud setups with remediation follow-up.
• Tenant isolation reviews to ensure data/workloads are kept apart with proof of compliance.
• Review of cloud and production access, secrets and configuration across systems.
• Technical due diligence on partners and suppliers whose infrastructure is used.
• Data handling audits for retention and deletion with evidence.
• Provide technical evidence for customer security reviews and ISO 27001 / SOC 2 audits.

Skills

Security testing

Threat modelling

Cloud security

Kubernetes

Code review

ISO 27001 / SOC 2

SaaS security

Multi-tenant SaaS

Tools

AWS

Azure

GCP

Job description

Aleroy in Abu Dhabi is seeking its first dedicated security engineer to design, test and harden a multi-tenant cloud platform. You will review features, run tests, and drive security practices across engineering, with reporting to the COO and close collaboration with the CTO.

Our role focuses on threat modelling, cloud and production access controls, data handling and audits for ISO 27001 and SOC 2. You’ll need hands-on testing skills and a track record securing SaaS platforms.