Senior Security Engineer — Cloud, Apps & Compliance

Calo Inc.; Dubai; On-site; AED 300,000 - 420,000; Full time

Job summary

Calo Inc. is seeking a Senior Security Engineer to own and elevate our security posture across cloud infrastructure, application security and compliance. This hands-on role involves designing controls, automating checks, identifying risks, and shipping fixes with engineering teams to production.

You'll help maintain audit readiness with evidence and controls in Drata, while embedding security into everyday delivery and guiding the company through secure growth in a fast-paced startup environment.

Qualifications

• 6 years of experience in security engineering or a closely related role.
• Proven experience leading security efforts in startups or high-growth environments.
• Strong hands-on background to identify, fix, and ship issues to production.
• Understanding of secure system design and vulnerability classes (OWASP Top 10, auth, session, API security).
• Experience securing AWS environments: IAM, KMS, encryption, secrets management, logging, auditing, network controls.
• Experience securing CI/CD pipelines, build systems and runtime environments.
• Incident response, vulnerability management and security monitoring experience.
• Clear communicator who explains risk trade-offs and recommendations.

Responsibilities

• Own and drive security roadmap with high-risk areas.
• Embed security into delivery with Platform, Product, Engineering, Data, Leadership.
• Benchmark systems against OWASP Top 10, ASVS, CIS; translate findings into remediation plans.
• Run threat modeling and security reviews for major architectural or product changes.
• Triage findings and deploy fixes to production.
• Strengthen IAM, secrets management, encryption, logging, and secure networking.
• Ensure secure baselines in production (hardening, patching, access control, auditing).
• Review and improve WAF rules, rate limiting, abuse prevention.
• Build incident response playbooks and drive post-incident improvements.
• Support GDPR/PDPL security and privacy requirements.
• Maintain control mapping and evidence in Drata with automation.

Skills

Security engineering

Startup experience

Hands-on security

Secure design

AWS security

CI/CD security

Incident response

Security communication

Job description

Calo Inc. is seeking a Senior Security Engineer to own and elevate our security posture across cloud infrastructure, application security and compliance. This hands-on role involves designing controls, automating checks, identifying risks, and shipping fixes with engineering teams to production.

You'll help maintain audit readiness with evidence and controls in Drata, while embedding security into everyday delivery and guiding the company through secure growth in a fast-paced startup environment.