Health And Safety Officer jobs in United Arab Emirates
Application Security Engineer
Job summary
Bayut & dubizzle is seeking an Application Security Engineer to collaborate with IT and development teams in ensuring security practices across their systems. This role involves conducting penetration tests, defining security controls, and participating in incident resolution within a fast-paced multicultural environment. The ideal candidate has significant experience in information security, with a strong foundation in security frameworks and practices.
Benefits
Qualifications
- Minimum 3-5 years in information security or a related role.
- Proven experience in security roles like Security Analyst or Security Engineer.
- Familiarity with frameworks like ISO 27001 and data protection regulations.
Responsibilities
- Conduct penetration testing and coordinate with external partners.
- Ensure vulnerabilities are processed in line with risk management policies.
- Participate in regular audits and remediate findings.
Skills
Education
Tools
Bayut & dubizzle are iconic, homegrown brands with a strong presence across the seven emirates in the UAE. Connecting millions of users, we aim to deliver the best online search experience.
As part of Dubizzle Group, we are among the market's strongest classified brands, with over 123 million monthly users trusting our platform.
As an Application Security Engineer, you will:
- Collaborate with internal teams to implement security controls, address vulnerabilities, and improve security practices across platforms & services.
- Conduct penetration testing on web applications, mobile applications, APIs, networks, and systems, coordinating with external partners as needed.
- Identify, document, and process vulnerabilities, threats, and risks according to our risk management policies.
- Participate in security incident resolution and help develop, maintain, and evaluate the Incident Response Plan.
- Monitor internal alerting systems and ensure timely resolution of security events.
- Participate in audits, including user access reviews, and ensure remediation of findings within agreed timelines.
- Enhance security awareness within technical teams through educational materials and campaigns.
- Review and update internal security policies and controls regularly.
Minimum qualifications:
- Bachelor’s degree in Computer Science, Information Security, or related field.
- 2+ years in application development.
- 3-5 years of experience in information security or similar roles.
- Proven experience as a Security Analyst, Engineer, Penetration Tester, or similar.
- Experience with security frameworks like ISO 27001, NIST, and Data Protection.
- Understanding of securing corporate environments and applications.
- Knowledge of hosting platforms, cloud services, and enterprise networking.
- Technical understanding of backend architectures.
- Familiarity with secure coding practices and vulnerability management frameworks (OWASP).
- Strong knowledge of identity and access management practices.
- Experience with security technologies such as firewalls, IDS/IPS, vulnerability scanning tools.
- Proficiency in programming languages like Python or C++.
- Understanding of network protocols and encryption algorithms.
- Knowledge of compliance standards like PCI DSS, GDPR.
- Excellent communication skills and analytical problem-solving abilities.
- Willingness to stay updated with emerging threats and technologies.
Benefits:
- Fast-paced, high-performing team environment.
- Multicultural workplace with over 50 nationalities.
- Competitive tax-free salary and comprehensive health insurance.
- Annual air ticket allowance and employee discounts.
- Recognition programs and learning opportunities.
Bayut & dubizzle are equal opportunity employers, committed to diversity and inclusion.
#dubizzlegroup
* The salary benchmark is based on the target salaries of market leaders in their relevant sectors. It is intended to serve as a guide to help Premium Members assess open positions and to help in salary negotiations. The salary benchmark is not provided directly by the company, which could be significantly higher or lower.