Senior Security Engineer (m/f/d)

Halian; Abu Dhabi; On-site; AED 320,000 - 520,000; Full time

Job summary

Halian is seeking a Senior Security Engineer to strengthen enterprise security across applications, cloud, and infrastructure in a regulated financial services context. You will drive secure-by-design practices, perform threat modelling, and lead secure design reviews while collaborating with Development, DevOps, and Product teams.

You will implement security tooling, conduct pen tests, and perform architecture reviews to enhance the organization's security posture.

Qualifications

• 8–15 years of experience in Information Security, Cyber Security, or Security Engineering roles.
• Strong hands‑on expertise in Application Security, Infrastructure Security, Cloud Security, Security Architecture.
• Hands‑on experience securing Kubernetes, Docker, Microservices, and Cloud‑Native Apps.

Responsibilities

• Conduct web, mobile, and API penetration testing and vulnerability assessments.
• Perform secure code reviews and identify security weaknesses in applications and infrastructure.
• Manage and optimize security tooling including SAST, DAST, SCA, IaC Security, and container security solutions.
• Drive DevSecOps initiatives and integrate security controls into CI/CD pipelines.
• Perform threat modelling, risk assessments, and architecture reviews.
• Design and review secure solutions across cloud, container, Kubernetes, and enterprise platforms.
• Lead vulnerability management activities, remediation planning and tracking.
• Support security incident investigations and root cause analysis.
• Deliver security awareness sessions and secure coding training to engineering teams.
• Collaborate with development, DevOps, infrastructure, and product teams to ensure secure implementation of solutions.
• Support continuous improvement of security standards, processes, and governance frameworks.
• Participate in security reviews and compliance initiatives across enterprise projects.

Skills

Application Security

Cloud Security

Infrastructure Security

Security Architecture

Web Application Penetration Testing

API Security Testing

Threat Modelling

Vulnerability Assessments

DevSecOps

CI/CD Security

Kubernetes

Docker

AWS Security

Azure Security

Identity & Access Management

Secrets Management

Python

Bash

PowerShell

Security Automation

Tools

SAST

DAST

SCA

IaC Security

Container Security Solutions

Job description

Senior Security Engineer

Role Overview

We are seeking an experienced Senior Security Engineer to strengthen and evolve enterprise security practices across application, infrastructure, and cloud environments within a highly regulated financial services environment.

This role will be responsible for driving secure-by-design principles across the software development lifecycle, implementing DevSecOps best practices, conducting security assessments, and enhancing the organization's overall security posture. The successful candidate will work closely with Development, DevOps, Infrastructure, Architecture, and Product teams to ensure security controls are embedded throughout the technology landscape.

The ideal candidate will possess deep technical expertise across application security, cloud security, penetration testing, threat modelling, and security architecture, combined with strong stakeholder management and communication skills.

Key Responsibilities

• Conduct web, mobile, and API penetration testing and vulnerability assessments.
• Perform secure code reviews and identify application and infrastructure security weaknesses.
• Manage and optimize security tooling including:
  • SAST
  • DAST
  • SCA
  • Infrastructure as Code (IaC) Security
  • Container Security Solutions
• Drive DevSecOps initiatives and integrate security controls into CI/CD pipelines.
• Perform threat modelling, security risk assessments, and architecture reviews.
• Design and review secure solutions across cloud, container, Kubernetes, and enterprise platforms.
• Lead vulnerability management activities, including remediation planning and tracking.
• Support security incident investigations, root cause analysis, and remediation efforts.
• Deliver security awareness sessions and secure coding training to engineering teams.
• Collaborate with development, DevOps, infrastructure, and product teams to ensure secure implementation of solutions.
• Support continuous improvement of security standards, processes, and governance frameworks.
• Participate in security reviews and compliance initiatives across enterprise projects.

Required Skills & Qualifications

• 8–15 years of experience in Information Security, Cyber Security, or Security Engineering roles.
• Strong hands‑on expertise in:
  • Application Security
  • Infrastructure Security
  • Cloud Security
  • Security Architecture
• Deep experience performing:
  • Web Application Penetration Testing
  • API Security Testing
  • Mobile Security Testing
  • Vulnerability Assessments
• Strong understanding of:
  • OWASP Top 10
  • OWASP API Security Top 10
  • Secure Development Practices
• Experience implementing and managing DevSecOps programmes.
• Strong expertise with CI/CD security integration and security automation.
• Experience conducting:
  • Threat Modelling
  • Risk Assessments
  • Security Architecture Reviews
  • Secure Design Assessments
• Hands‑on experience securing:
  • Kubernetes Environments
  • Docker Containers
  • Microservices Architectures
  • Cloud‑Native Applications
• Strong knowledge of:
  • AWS Security
  • Azure Security
  • Identity & Access Management
  • Secrets Management
  • Network Security
• Experience supporting security incident response and remediation activities.
• Strong stakeholder management, presentation, and communication skills.
• Experience with scripting and automation using:
  • Python
  • Bash
  • PowerShell

Preferred Skills & Experience

• Banking or Financial Services industry experience.
• Strong understanding of PCI‑DSS compliance requirements.
• Experience working with governance and compliance frameworks including:
  • ISO 27001
  • SOC 2
  • NIST
  • CIS
• Familiarity with GDPR and privacy regulations.
• Experience establishing or supporting Security Champion programmes.
• Exposure to Security Operations and Incident Response functions.
• Relevant security certifications such as:
  • CISSP
  • CSSLP
  • OSCP
  • CEH
  • AWS Security Specialty
  • Azure Security Engineer Associate

Halian Group

With over 28 years of experience, we have come to understand that innovation is the only way to provide agile, practical solutions that transform businesses and careers. Our resourcing and smart services help you to realise tomorrow's potential. Discover the amazing things possible when you bring the right people and the right technologies together.

At Halian, we recognise that diversity, equity, and inclusion (DEI) are essential to building high-performing teams for our clients. We are committed to connecting organisations with top talent from all backgrounds, ensuring that every individual feels valued, respected, and empowered to contribute their unique perspectives.

We encourage applications from all qualified candidates, regardless of race, gender, disability, or any other characteristic that makes them unique.

#LI-CC1