Sr. Manager/Network & Application Security

etisalat UAE; Dubai; On-site; AED 350,000 - 550,000; Full time

Job summary

Emirates Telecommunications Group Company PJSC is seeking a visionary security leader to define and execute strategies to enhance security practices, integrate DevSecOps, and manage application and domain security.

The role provides technical guidance, ensures compliance with internal and external standards, and fosters a security-first culture to protect digital assets and ensure resilience against evolving threats.

Qualifications

• Bachelor's degree in Computer Science or Information Security or related field.
• 8+ years of information security experience with emphasis on application and network security.
• Proven leadership experience in managing security teams and driving strategic initiatives.
• Expertise in DevSecOps, including CI/CD pipeline security.
• Strong knowledge of application security frameworks, tools, and best practices.
• Experience in security assessments, penetration testing, and vulnerability management.
• Understanding of domain security including DNS, TLS/SSL, certificate management.
• Excellent communication and collaboration across teams.
• Data-driven decision making and continuous improvement focus.
• Up-to-date with latest security trends and technologies.

Responsibilities

• Define and maintain security strategies for DevSecOps, application, and domain security.
• Develop and implement security governance for CI/CD pipelines and domain management.
• Translate strategic objectives into measurable KPIs and monitor progress.
• Provide technical and managerial guidance to team members on complex assessments.
• Integrate security controls into CI/CD pipelines and secure development lifecycle.
• Lead the Application Security program, including secure coding standards and threat modeling.
• Lead domain security assessments ensuring compliance with regulations.
• Review and validate technical reports from security assessments and provide remediation guidance.
• Ensure compliance with internal and external security standards and translate requirements into controls.
• Monitor security tool licenses, resource use, and project timelines to ensure cost-effective coverage.

Skills

Leadership experience

DevSecOps

Communication

Analytical

Collaboration

Data-driven decisions

Education

Bachelor's degree in CS/InfoSec

Advanced degree preferred

Tools

CI/CD security tools

Threat modeling tools

Job description

Job Description

We are seeking a visionary leader to drive the security agenda at Emirates Telecommunications Group Company PJSC. The successful candidate will define and execute strategies to enhance security practices, integrate DevSecOps, and manage application and domain security. They will provide technical guidance, ensure compliance with internal and external standards, and foster a security-first culture. This role is pivotal in protecting the organization's digital assets and ensuring its resilience against evolving cyber threats.

Job Description

We are seeking a visionary leader to drive the security agenda at Emirates Telecommunications Group Company PJSC. The successful candidate will define and execute strategies to enhance security practices, integrate DevSecOps, and manage application and domain security. They will provide technical guidance, ensure compliance with internal and external standards, and foster a security-first culture. This role is pivotal in protecting the organization's digital assets and ensuring its resilience against evolving cyber threats.

Responsibilities

• Define and maintain security strategies for DevSecOps, application, and domain security, aligning with corporate and regulatory requirements.
• Develop and implement security governance frameworks for CI/CD pipelines, application development, and domain management.
• Translate strategic objectives into measurable KPIs, tracking progress and adjusting strategies as needed.
• Provide technical and managerial guidance to team members, supporting complex assessments and escalations.
• Integrate security controls into CI/CD pipelines, ensuring secure development lifecycle practices across application teams.
• Manage the Application Security program, including secure coding standards, threat modeling, and penetration testing.
• Lead security assessments of domains, ensuring compliance with internal and governmental regulations.
• Review and validate technical reports from security assessments, providing clear remediation recommendations.
• Ensure compliance with internal and external security standards, translating regulatory requirements into practical controls.
• Monitor and optimize security tool licensing, resource utilization, and project timelines, ensuring cost-effective coverage.

Qualifications

• Bachelor's degree in Computer Science, Information Security, or a related field; advanced degree preferred.
• 8 years of experience in information security, with a focus on application and network security.
• Proven leadership experience in managing security teams and driving strategic initiatives.
• Expertise in DevSecOps practices, including CI/CD pipeline security and secure development lifecycle.
• Strong knowledge of application security frameworks, tools, and best practices.
• Experience in conducting security assessments, penetration testing, and vulnerability management.
• Understanding of domain security, including DNS, TLS/SSL, and certificate management.
• Excellent communication and interpersonal skills, with the ability to collaborate across teams.
• Analytical mindset with a focus on data-driven decision-making and continuous improvement.
• Up-to-date with the latest security trends, threats, and emerging technologies in the industry.