Senior Security Engineer M F D

Halian | Managed Services, Recruitment Agency & Contract Staffing; Abu Dhabi; On-site; AED 180,000 - 300,000; Full time

Job summary

Halian Group in Abu Dhabi seeks a Senior Security Engineer to strengthen security across applications, infrastructure, and cloud in a regulated financial services environment. You will drive secure-by-design principles throughout SDLC and advance DevSecOps practices.

Responsibilities include penetration testing, threat modelling, vulnerability management, and security architecture reviews, collaborating with DevOps, Infra, and Product teams to embed robust controls.

Qualifications

• 8-15 years of information security or security engineering experience.
• Deep expertise across application, infrastructure and cloud security.
• Strong experience with web, API and mobile security testing, and vulnerability assessments.
• Solid understanding of OWASP Top 10 and API Security Top 10.
• Experience with DevSecOps, CI/CD security integration and automation.
• Hands-on with Kubernetes, Docker, microservices and cloud-native apps.

Responsibilities

• Conduct web, mobile, and API penetration testing and vulnerability assessments.
• Perform secure code reviews and identify application and infrastructure security weaknesses.
• Manage and optimize security tooling including: SAST, DAST, SCA, IaC Security, Container Security Solutions.
• Drive DevSecOps initiatives and integrate security controls into CI/CD pipelines.
• Perform threat modelling, security risk assessments, and architecture reviews.
• Design and review secure solutions across cloud, container, Kubernetes, and enterprise platforms.
• Lead vulnerability management activities, including remediation planning and tracking.
• Support security incident investigations, root cause analysis, and remediation efforts.
• Deliver security awareness sessions and secure coding training to engineering teams.
• Collaborate with development, DevOps, infrastructure, and product teams to ensure secure implementation of solutions.
• Support continuous improvement of security standards, processes, and governance frameworks.
• Participate in security reviews and compliance initiatives across enterprise projects.

Skills

Application Security

Infrastructure Security

Cloud Security

Security Architecture

Web App Pen Testing

API Security Testing

Mobile Security Testing

Vulnerability Assessments

DevSecOps

CI/CD Security

Threat Modelling

Risk Assessments

Kubernetes

Docker

Microservices

Cloud-Native Apps

AWS Security

Azure Security

IAM & Secrets

Network Security

Scripting: Python

PowerShell

Education

Bachelor's degree in Computer Science or related field

Tools

SAST

DAST

SCA

IaC Security

Container Security

Job description

Job Description:

Senior Security Engineer

Role Overview

We are seeking an experienced Senior Security Engineer to strengthen and evolve enterprise security practices across application, infrastructure, and cloud environments within a highly regulated financial services environment. This role will be responsible for driving secure-by-design principles across the software development lifecycle, implementing DevSecOps best practices, conducting security assessments, and enhancing the organization's overall security posture. The successful candidate will work closely with Development, DevOps, Infrastructure, Architecture, and Product teams to ensure security controls are embedded throughout the technology landscape.

The ideal candidate will possess deep technical expertise across application security, cloud security, penetration testing, threat modelling, and security architecture, combined with strong stakeholder management and communication skills.

Key Responsibilities

• Conduct web, mobile, and API penetration testing and vulnerability assessments.
• Perform secure code reviews and identify application and infrastructure security weaknesses.
• Manage and optimize security tooling including:
  • SAST
  • DAST
  • SCA
  • Infrastructure as Code (IaC) Security
  • Container Security Solutions
• Drive DevSecOps initiatives and integrate security controls into CI/CD pipelines.
• Perform threat modelling, security risk assessments, and architecture reviews.
• Design and review secure solutions across cloud, container, Kubernetes, and enterprise platforms.
• Lead vulnerability management activities, including remediation planning and tracking.
• Support security incident investigations, root cause analysis, and remediation efforts.
• Deliver security awareness sessions and secure coding training to engineering teams.
• Collaborate with development, DevOps, infrastructure, and product teams to ensure secure implementation of solutions.
• Support continuous improvement of security standards, processes, and governance frameworks.
• Participate in security reviews and compliance initiatives across enterprise projects.

Required Skills & Qualifications

• 8-15 years of experience in Information Security, Cyber Security, or Security Engineering roles.
• Strong hands-on expertise in:
  • Application Security
  • Infrastructure Security
  • Cloud Security
  • Security Architecture
• Deep experience performing:
  • Web Application Penetration Testing
  • API Security Testing
  • Mobile Security Testing
  • Vulnerability Assessments
• Strong understanding of:
  • OWASP Top 10
  • OWASP API Security Top 10
  • Secure Development Practices
• Experience implementing and managing DevSecOps programmes.
• Strong expertise with CI/CD security integration and security automation.
• Experience conducting:
  • Threat Modelling
  • Risk Assessments
  • Security Architecture Reviews
  • Secure Design Assessments
• Hands-on experience securing:
  • Kubernetes Environments
  • Docker Containers
  • Microservices Architectures
  • Cloud-Native Applications
• Strong knowledge of:
  • AWS Security
  • Azure Security
  • Identity & Access Management
  • Secrets Management
  • Network Security
• Experience supporting security incident response and remediation activities.
• Strong stakeholder management, presentation, and communication skills.
• Experience with scripting and automation using:
  • Python
  • Bash
  • PowerShell

Preferred Skills & Experience

• Banking or Financial Services industry experience.
• Strong understanding of PCI-DSS compliance requirements.
• Experience working with governance and compliance frameworks including:
  • ISO 27001
  • SOC 2
  • NIST
  • CIS
• Familiarity with GDPR and privacy regulations.
• Experience establishing or supporting Security Champion programmes.
• Exposure to Security Operations and Incident Response functions.
• Relevant security certifications such as:
  • CISSP
  • CSSLP
  • OSCP
  • CEH
  • AWS Security Specialty
  • Azure Security Engineer Associate

Halian Group

With over 28 years of experience, we have come to understand that innovation is the only way to provide agile, practical solutions that transform businesses and careers. Our resourcing and smart services help you to realise tomorrow's potential. Discover the amazing things possible when you bring the right people and the right technologies together.

At Halian, we recognise that diversity, equity, and inclusion (DEI) are essential to building high-performing teams for our clients. We are committed to connecting organisations with top talent from all backgrounds, ensuring that every individual feels valued, respected, and empowered to contribute their unique perspectives.

We encourage applications from all qualified candidates, regardless of race, gender, disability, or any other characteristic that makes them unique.

Senior Security Engineer in Abu Dhabi, United Arab Emirates

Requirements