Staff Security Engineer

Digital Zone; United Arab Emirates; On-site; AED 360,000 - 600,000; Full time

Benefits offered by this job

Top-of-the-market compensation

Team with regional security leaders

Job summary

DigitalZone in the United Arab Emirates seeks a Senior Security Architect who will set technical direction across application, cloud, payment, and identity flows. This is the most senior IC security role; you own hard problems, read code, build tooling, and deliver hands-on security improvements.

You will design and mature the secure SDLC, drive vulnerability management, and establish secure-by-design patterns for authentication, IAM, and infrastructure security.

Qualifications

• 8+ years in software or security engineering with hands-on depth across application security, cloud security, and detection and response.
• Strong track record threat modeling and securing systems handling payments or sensitive data.
• Solid engineering fundamentals in AWS security, modern authentication/authorization patterns, and at least one core language.
• Familiarity with PCI DSS, ISO 27001, OWASP, SOC 2 and how to operationalize them without slowing delivery.

Responsibilities

• Design and mature the secure SDLC to support engineers in remediation of findings.
• Run vulnerability management and coordinate penetration tests with key metrics.
• Define secure-by-design patterns for authentication, authorization, cloud networking, secrets management, and IAM.
• Act as primary liaison between customers and security vendors, aligning on findings and risk priorities.

Skills

Senior security engineering

Application Security

Cloud Security

Threat Modeling

Vulnerability Management

Compliance frameworks

Tools

AWS Security

Job description

You will set the technical direction for security across DigitalZone's platform, from application and cloud security to the payment and identity flows at the core of the business. This is the most senior individual-contributor security role: you own the hardest problems, do the hands-on work, and raise the bar for the whole engineering org. You can read the code, build the tooling, and fix the issue, not just file it.

What you’ll do:

• Design and mature the secure SDLC, to support engineers in prioritising and remediating findings:
  • Application Security: Leverage deterministic and LLM assisted automation to identify and remediate vulnerabilities across code developed within DigitalZone
  • Supply Chain Security: Design and implement solutions to mitigate the risks of vulnerable and compromised 3rd party dependencies. Including, the verification of feature and release integrity
  • Infrastructure & Cloud Security: Integrate scalable solutions to identify and patch vulnerabilities across the container and cloud infrastructure delivery process, including scanning, signing, admission control and runtime security
• Run vulnerability management and coordinate penetration tests, and defining and tracking key vulnerability metrics
• Define secure-by-design patterns and success criteria for authentication and authorization, cloud networking, secrets management, and IAM
• Act as the primary liaison between customers and security vendors, driving alignment on security findings, remediation priorities, risk acceptance decisions, and strategic security outcomes

Requirements

What you’ll bring

• 8+ years in software or security engineering with deep hands-on depth across application security, cloud/infra security, and detection and response
• Strong track record threat modeling and securing systems that handle payments or sensitive financial and PII data
• Strong engineering fundamentals: fluency in AWS security, modern authentication and authorisation patterns, and at least one of our core languages
• Working knowledge of relevant frameworks (PCI DSS, ISO 27001, OWASP, SOC 2) and how to operationalize them without slowing delivery
• Apply judgment on risk tradeoffs and direct, clear and practical communication with engineers and leadership

Benefits

• Immediate, large-scale impact on a high-growth business
• Top-of-the-market compensation packages
• Work alongside top regional talent, with team members from Talabat, Careem, Etisalat, and more