Senior Security Engineer: Cloud, DevSecOps & Pen Testing

TAT IT Technolgies; Dubai; On-site; AED 300,000 - 540,000; Full time

Job summary

TAT IT Technolgies in Dubai seeks an experienced Security Engineer with expertise in application, infrastructure, and cloud security. You will perform penetration testing across web, mobile, and APIs, lead secure coding reviews, and drive security automation within CI/CD pipelines.

Ideal candidates have 7–12 years of hands-on security experience, cloud security knowledge (AWS and Azure), and strong threat modeling and risk assessment skills.

Qualifications

• Hands-on expertise in penetration testing across web, mobile, and APIs.
• Proficiency with SAST, DAST, SCA, IaC, and container scanning tools.
• Strong knowledge of DevSecOps, CI/CD security, and automation frameworks.
• Cloud security best practices in AWS and Azure.
• Security architecture design and risk reviews.

Responsibilities

• Conduct penetration testing across web applications, mobile applications, and APIs.
• Execute secure code reviews to identify and remediate vulnerabilities in application code, scripts, and configurations.
• Configure, optimize, and manage results from SAST, DAST, SCA, IaC, and container scanning tools.
• Drive DevSecOps initiatives, emphasizing security automation within CI/CD pipelines.
• Enhance the security posture of Kubernetes, container runtimes, and the underlying infrastructure.
• Contribute to security architecture design and conduct risk reviews for applications, cloud environments, and infrastructure.
• Lead threat modeling, risk assessments, and end-to-end vulnerability management.
• Promote security awareness by establishing and delivering training sessions and best-practice workshops.
• Partner with development, DevOps, and infrastructure teams to guarantee secure design and delivery.
• Act as a trusted security advisor, translating complex technical risks into actionable recommendations for non-technical stakeholders.
• Participate in incident response, conduct post-incident reviews, and ensure lessons learned are implemented.
• Stay continuously updated on emerging threats, modern attack vectors, and innovative security technologies.

Skills

Penetration testing

Cloud security

DevSecOps

Security architecture

SAST

DAST

SCA

IaC security

Kubernetes security

Docker

Python/Bash

Threat modeling

Tools

AWS

Azure

CI/CD tooling

Job description

TAT IT Technolgies in Dubai seeks an experienced Security Engineer with expertise in application, infrastructure, and cloud security. You will perform penetration testing across web, mobile, and APIs, lead secure coding reviews, and drive security automation within CI/CD pipelines.

Ideal candidates have 7–12 years of hands-on security experience, cloud security knowledge (AWS and Azure), and strong threat modeling and risk assessment skills.