ai engineer

senior software engineer

software engineer

it engineer

automation engineer

application security engineer

Bayut.com

In this role you will: <ul> <li>Collaborate with internal teams to implement security controls, address vulnerabilities and improvesecurity practices in the relevant platforms &amp; services.</li> <li>Conduct penetration testing on web applications, mobile applications, APIs, networks, and system and coordinate the pen-testing projects executed by external partners.</li> <li>Ensure identified vulnerabilities, threats and risks are captured and processed in line with our risk management policy and procedure.</li> <li>Take part in security incident resolution and contribute to the development, maintenance and assessment of the Incident Response Plan s effectiveness.</li> <li>Monitor the internal alerting systems and drive the events to closure.</li> <li>Participate in regular internal and external audits (including periodic user access reviews) on critical systems and ensure audit findings are remediated in the agreed timeframe.</li> <li>Reduce the information security knowledge gap within the technical teams by contributing to the creation of educational materials and awareness campaigns.</li> <li>Implement and regularly review the internal security policies and controls across all business-critical services.</li> </ul>

Application Security Engineer

SAVE IN GOLD

Job Title: Cyber Security Engineer (Mobile &amp; Web Trading Apps)Location: Dubai, UAEEmployment Type: Full-time / On-siteExperience: 3&ndash;6 yearsWe are looking for a Cyber Security Engineer to help secure our mobile and web trading applications.The ideal candidate will have deep knowledge of ethical hacking, fintech app security, and experience testing real-world trading and payment flows.Key ResponsibilitiesPerform security testing (VAPT) for mobile and web trading applicationsIdentify and fix vulnerabilities such as data leaks, weak authentication, and insecure APIsConduct manual and automated penetration testing including business logic and workflow attacksTest trading-specific flows for issues like order manipulation, replay attacks, race conditions, and incorrect settlementsTest API endpoints for unauthorized access, missing rate limits, and parameter tamperingTest mobile apps for jailbreak/root bypass, insecure data storage, and certificate pinning bypassReview code and configurations for encryption, authentication, and transaction logic risksValidate transaction integrity and secure wallet operationsPrepare clear, detailed security reports with risk levels and actionable recommendationsCollaborate with developers, QA, and backend teams to ensure secure fixesEnsure compliance with secure coding practices, OWASP, ISO 27001, and fintech data protection standardsTest for fraud and abuse scenarios including bot automation, fake orders, and session hijackingValidate key management, encryption (in transit &amp; at rest), and use of HSM or cloud key vaultsVerify logging and alerting for suspicious transactions and security incidentsStay updated on latest hacking tools, mobile/web attack trends, and financial app threatsRequired SkillsStrong understanding of mobile (Android/iOS) and web app securityHands-on with Burp Suite, ZAP, Postman, Nmap, MobSF, Frida, or similar toolsGood understanding of OWASP Top 10, API security, SAST/DAST, and vulnerability analysisExperience testing trading, wallet, and payment flowsKnowledge of attacks like replay, race condition, spoofing, and injectionFamiliar with cryptography and key management (HSM/KMS)Experience with anti-bot, rate-limiting, and session management controlsStrong report writing and communication skillsTeam player who collaborates well with developers and testersExperience in fintech or banking is highly preferredQualificationsBachelor&rsquo;s or Master&rsquo;s in Computer Science, IT, or CybersecurityCertifications: CEH, OSCP, ISO 27001, or equivalent preferred3+ years of experience in penetration testing and application securityBased in UAEJob Type: Full-timePay: AED5,000.00 - AED7,000.00 per month

Cyber Security Engineer

Accenture

Key Responsibilities:
<ul>
<li>As an Application Security Specialist at Accenture, you will play a pivotal role in ensuring the security of applications and cloud environments. Your responsibilities will include:</li>
<li>Application Security Testing: Design, implement, plan, and execute comprehensive application security testing for on-premises and SaaS applications. Conduct security tests such as Static Application Security Testing (SAST), Dynamic Application Security Testing (DAST), API Security Testing, Web Penetration Testing, Threat Modeling, and Security Architecture Reviews. Utilize industry-leading tools such as Veracode, Microfocus Fortify, WebInspect, Burp Suite, and Synopsis. Operate within DevSecOps frameworks and standalone environments to ensure robust security measures.</li>
<li>Native Application Security Capabilities: Design, implement, and manage security capabilities for SaaS and enterprise systems, including: Oracle Risk Management Cloud (RMC) for Oracle HCM and Finance applications, covering AAC (Advanced Access Controls), AFC (Advanced Financial Controls), and FRC (Financial Reporting Compliance) for segregation of duties (SOD) and custom role management. SAP Governance, Risk, and Compliance (GRC) solutions.</li>
<li>Cloud Security Capabilities: Design, implement, and manage native cloud security capabilities for Oracle Cloud IaaS and PaaS services, including: Web Application Firewall (WAF) and Security Lists. Cloud Guard and Data Guard for enhanced security monitoring and data protection. Identity Domain, UAE PASS integration, and Database Activity Monitoring (DAM). Key Vault / Hardware Security Module (HSM) for secure key management. Oracle Integration Cloud (OIC) and Autonomous Database (ADB) security hardening. API Gateways for secure API management.</li>
</ul>

Application Security Specialist

ULTIMATE HUMAN RESOURCES SOLUTIONS LLC

Cloud & Infrastructure Security•Design and implement security architecture for AWS infrastructure including EKS, S3, RDS, IAM, VPC, KMS, GuardDuty, and WAF.•Define and enforce baseline configurations aligned with CIS Benchmarks and AWS Well-Architected Security Pillar.•Oversee hardening of Kubernetes workloads, container image scanning, runtime protection, and identity federation.Application & API Security•Lead secure architecture reviews for microservices, APIs, and user workflows.•Implement and maintain AppSec tooling (GHAS, SonarQube, BurpSuite) across the CI/CD pipeline.•Guide the development team in secure coding practices, input validation, authN/authZ patterns, and session management.Threat Modeling & Hunting•Lead threat modeling sessions (STRIDE, DFD) for new product features and third-party integrations.•Define custom detections and alerts leveraging Sysdig, AWS CloudTrail, and OpenTelemetry.•Collaborate on red/purple teaming exercises and post-mortem investigations.DevSecOps Enablement•Work with DevSecOps team to Integrate security gates into GitHub Actions, Jenkins, and ArgoCD workflows.•Work with DevSecOps team to automate compliance checks, container scans, and artifact validation pre-deployment.•Work with DevSecOps team to build re-usable Terraform/Helm security modules and IaC validations.Data Security & Compliance•Define controls for data encryption, masking, tokenization, and data loss prevention.•Support audits and assessments for PCI DSS, ISO 27001, SOC 2, UAE DPL/IAR.•Act as a technical SME during regulator and client security reviews.

Security Architect

Security Architect - Cloud based Infrastructure

ATHGADLANG

Job SummaryThe Cybersecurity Engineer will play a key role in designing, implementing, and maintaining secure IT and OT environments across the organization. This role involves hands-on technical work in security architecture, vulnerability management, incident response, and compliance alignment. The engineer will collaborate with cross-functional teams to embed security best practices into infrastructure, applications, and cloud environments, ensuring compliance with ISO 27001, UAEIA, and NIST standards.Key Responsibilities1. Security Architecture &amp; Engineering<ul><li>Design and implement secure architectures across IT and OT systems following defense-in-depth and secure-by-design principles.</li><li>Develop and maintain security controls for infrastructure, endpoints, cloud, and applications.</li><li>Validate the security of network, system, and cloud configurations against architecture standards and compliance requirements.</li></ul>2. Vulnerability &amp; Risk Management<ul><li>Conduct regular vulnerability assessments and threat modeling for enterprise assets.</li><li>Analyze and prioritize risks, coordinating remediation with infrastructure and application teams.</li><li>Ensure risk mitigation aligns with ISO 27001, UAEIA, and NIST frameworks.</li></ul>3. Security Operations &amp; Monitoring<ul><li>Review alerts, logs, and indicators of compromise to support continuous monitoring and incident detection.</li><li>Recommend and implement automation or tuning improvements to enhance detection accuracy and reduce false positives.</li></ul>4. Cloud &amp; Application Security<ul><li>Engineer secure architectures and configurations for multi-cloud environments (AWS, Azure, GCP).</li><li>Integrate security controls within CI/CD pipelines and DevSecOps workflows.</li><li>Participate in secure code reviews and support application security testing (SAST, DAST).</li></ul>5. Incident Response &amp; Forensics<ul><li>Lead technical response during cyber incidents, conducting root cause analysis and digital forensics.</li><li>Update and maintain incident response playbooks; lead post-incident reviews.</li><li>Ensure evidence handling and documentation comply with legal and regulatory standards.</li></ul>6. Compliance &amp; Policy Alignment<ul><li>Ensure cybersecurity policies, standards, and procedures meet UAEIA, ISO 27001/27002, and internal audit requirements.</li><li>Support audit readiness by maintaining accurate documentation, technical standards, and access control records.</li><li>Provide technical input during internal reviews and regulatory assessments.</li></ul>7. Stakeholder Collaboration<ul><li>Collaborate with SOC, IT infrastructure, application, risk, and audit teams to embed security into projects and operations.</li><li>Review network and system architectures from a security standpoint, providing risk-based recommendations.</li><li>Participate in change management processes to evaluate security impacts.</li></ul>Technical Expertise<ul><li>Strong knowledge of network security technologies (firewalls, WAFs, IDS/IPS) and configuration best practices.</li><li>Experience with SIEM (e.g., Splunk, QRadar), SOAR, EDR/XDR, vulnerability management (Tenable, Qualys), and PAM (CyberArk, BeyondTrust).</li><li>Skilled in securing hybrid and cloud-native environments.</li><li>Familiar with secure development, DevSecOps, and container security (Docker, Kubernetes).</li><li>Proficient in scripting languages such as Python, PowerShell, or Bash for automation and analysis.</li></ul>Required Skills and Qualifications<ul><li>5&ndash;8 years of experience in cybersecurity engineering, security architecture, or technical risk management.</li><li>Strong understanding of network, endpoint, cloud, and application security principles.</li><li>Experience in vulnerability management, threat modeling, and incident response.</li><li>Working knowledge of ISO 27001, UAEIA, NIST CSF, and MITRE ATT&amp;CK frameworks.</li><li>Excellent communication skills with the ability to explain complex security concepts to non-technical stakeholders.</li><li>Relevant certifications such as CISSP, OSCP, CEH, GCIA, CCSP, or equivalent preferred.</li></ul>Key DeliverablesSecurity Architecture &amp; Engineering<ul><li>Secure architecture diagrams, design documentation, and technical standards.</li><li>Assessment reports on system and infrastructure configurations with mitigation recommendations.</li></ul>Vulnerability &amp; Risk Management<ul><li>Regular vulnerability analysis reports, remediation tracking, and risk assessments.</li><li>Threat models aligned with business and regulatory priorities.</li></ul>Security Operations &amp; Monitoring<ul><li>SIEM/SOAR detection use cases and correlation rules.</li><li>Dashboards and metrics demonstrating incident detection and response improvements.</li></ul>Cloud &amp; Application Security<ul><li>CI/CD security validation checklists and application testing reports.</li><li>Cloud security posture assessments and hardening reports.</li></ul>Incident Response &amp; Forensics<ul><li>Investigation logs, post-incident reports, and updated IR playbooks.</li><li>Documented forensic analysis and evidence handling reports.</li></ul>Documentation &amp; Compliance<ul><li>Technical SOPs and configuration baselines aligned with ISO 27001 and UAEIA.</li><li>Audit-ready documentation for network changes, access control, and policy exceptions.</li></ul>Cybersecurity &amp; Network Knowledge Sharing<ul><li>Quarterly security landscape reports highlighting trends, risks, and recommendations.</li><li>Knowledge-sharing sessions and training materials for internal teams.</li></ul>Reporting &amp; GovernanceThe Cybersecurity Engineer will report to the Head of Cybersecurity (or equivalent) and will contribute to the organization&rsquo;s overall security posture, ensuring compliance, operational resilience, and continuous improvement.Job Types: Full-time, Contract

Cyber Security Engineer- 6 Months

Spectrum Consulting

Job Description: We are looking for an experienced and highly motivated DevOps Engineer to join our dynamic team. As an Azure DevOps Engineer, you will be responsible for automating and managing the entire DevOps pipeline using Azure DevOps Services, ensuring smooth collaboration between development and operations teams, and delivering high-quality software solutions. Key Responsibilities: <ul> <li>Design, implement, and manage CI/CD pipelines using Azure DevOps Pipelines for automated build, test, and deployment processes.</li> <li>Implement Infrastructure as Code (IaC) using Azure Resource Manager (ARM) Templates, Terraform, and Azure Bicep to automate infrastructure provisioning and management.</li> <li>Manage and optimize Azure cloud resources such as Azure Virtual Machines, App Services, Azure Kubernetes Service (AKS), and Azure Functions.</li> <li>Automate deployment and management of containerized applications using Docker and Kubernetes on Azure Kubernetes Service (AKS).</li> <li>Work with Azure Repos for source code versioning, Git workflows, and branching strategies.</li> <li>Ensure application performance and monitor infrastructure using Azure Monitor, Log Analytics, Application Insights, and Azure Security Center.</li> <li>Implement security best practices by configuring Azure Active Directory, RBAC, and other security tools.</li> <li>Collaborate with cross-functional teams to design, test, and deploy new features in a collaborative Agile environment.</li> <li>Provide support for troubleshooting, monitoring, and improving system performance, scalability, and security.</li> </ul> Required Skills: <ul> <li> Azure DevOps Services: Hands-on experience with Azure Pipelines, Azure Repos, Azure Artifacts, and Azure Test Plans.</li> <li> Cloud Expertise: In-depth knowledge of Microsoft Azure services like Azure Virtual Machines, App Services, Azure Kubernetes Service (AKS), Azure Functions, and Azure Networking.</li> <li> CI/CD Pipeline Management: Strong experience in setting up and maintaining Continuous Integration (CI) and Continuous Deployment (CD) pipelines.</li> <li> Version Control: Strong understanding of Git and Azure Repos, with knowledge of branching strategies, merging, and pull requests.</li> <li> Monitoring &amp; Logging: Proficiency in Azure Monitor, Application Insights, Log Analytics, and Azure Security Center for application and infrastructure monitoring.</li> </ul> Nice to have: Any on site experience is added advantage Microsoft Certified: Azure DevOps Engineer Expert, Microsoft Certified: Azure Administrator Associate, or any related Azure certifications.

Gulf: DevOps Engineer

Explore 4489+ Application security engineer in Dubai this November. Find roles across top companies and apply now to boost your career.