Senior Web App & API Security Engineer

Halian; Abu Dhabi; On-site; AED 350,000 - 520,000; Full time

Job summary

Halian in the United Arab Emirates seeks an experienced security professional to assess, test, and strengthen the security of complex web applications, APIs, and authentication systems. You will identify vulnerabilities, validate controls, and drive remediation to protect critical workflows and data from emerging threats.

The role covers manual and automated testing, access control reviews, token validation, and secure development practices.

Qualifications

• Minimum 5 years of hands-on web app and API penetration testing.
• Strong understanding of modern attack techniques and security testing methodologies.

Responsibilities

• Conduct comprehensive web app and API security testing including authentication, authorization, and input validation.
• Assess file handling, access controls, and data exposure risks.
• Provide risk-based remediation guidance and collaborate with developers.
• Deliver security assessment reports and support re-testing.

Skills

Penetration testing

Threat modeling

Security frameworks

OWASP Top 10

Tools

Burp Suite Pro

Postman

ZAP

Nuclei

Semgrep

Job description

Halian in the United Arab Emirates seeks an experienced security professional to assess, test, and strengthen the security of complex web applications, APIs, and authentication systems. You will identify vulnerabilities, validate controls, and drive remediation to protect critical workflows and data from emerging threats.

The role covers manual and automated testing, access control reviews, token validation, and secure development practices.