Tooling & DevSecOps

Position: Security Engineer - Tooling & DevSecOps

Location: Dubai

Job Purpose

The primary focus of this role is to build and maintain the shared automation backbone that supports both security operations teams (Red, Blue, Purple) and the product SDLC. This role is responsible for eliminating operational toil by developing reliable pipelines for scans, telemetry, and evidence management, while embedding security into DevOps workflows to ensure vulnerabilities are identified and remediated early in the development process.

Key Responsibilities

CI/CD & DevSecOps Automation

• Integrate SAST (Semgrep), DAST (ZAP, Burp), and SCA scanners into GitHub/GitLab pipelines.
• Enforce IaC and container-image checks (Terraform, CloudFormation, Dockerfile linters).
• Publish build-stage security metrics (OWASP risk tags, pass/fail gates) to engineering dashboards.

Offensive & Defensive Tool...