Tech Lead: AI-Driven Vulnerability Engine

Deriv.com; Dubai; On-site; AED 260,000 - 520,000; Full time

Job summary

Deriv is seeking a Senior Security Engineer to own the vulnerability management lifecycle across cloud, endpoints, and infrastructure within a fast-paced fintech environment. You will lead the automation-first vulnerability engine, applying AI-assisted prioritization to reduce exposure windows and drive measurable risk reductions.

In this role, you will align CSPM, SIEM, and EDR integrations, collaborate with global teams, and set governance around remediation SLAs.

Qualifications

• 8-12+ years in cybersecurity with vulnerability management focus.
• Expert-level experience with Qualys VMDR or equivalent.
• Strong automation and scripting capabilities.
• Cloud security across AWS, GCP, Azure and CSPM integrations.

Responsibilities

• Own the full vulnerability lifecycle from discovery to reporting.
• Lead Qualys VMDR operations across cloud, endpoints, and networks.
• Implement risk-based prioritization and remediation governance.
• Define remediation SLAs and reduce exposure windows.
• Design automated vulnerability intake and remediation workflows.
• Use AI to enrich vulnerability context and enable automated patching.
• Bridge Global Security Operations with local IT/Engineering.

Skills

Python

Bash

API integrations

Workflow automation

AI-assisted prioritization

Executive reporting

Cloud security

Tools

Qualys VMDR

Tenable

Rapid7

SIEM

EDR

Job description

Deriv is seeking a Senior Security Engineer to own the vulnerability management lifecycle across cloud, endpoints, and infrastructure within a fast-paced fintech environment. You will lead the automation-first vulnerability engine, applying AI-assisted prioritization to reduce exposure windows and drive measurable risk reductions.

In this role, you will align CSPM, SIEM, and EDR integrations, collaborate with global teams, and set governance around remediation SLAs.