Cyber Security Engineers BLUE TEAM

about the role

Operating from Abu Dhabi since 1985, our client provides personal and business banking services across retail banking, wealth management, commercial banking, corporate finance, investment banking, and cash management. The breadth of these financial services creates a complex technology landscape where secure customer access, resilient operations, and disciplined cyber controls are essential. This organisation continues to protect highly regulated banking activities while responding to increasingly sophisticated threats across infrastructure, cloud services, applications, and emerging artificial-intelligence capabilities.

The Cyber Security Engineer will strengthen the blue-team capability by turning security requirements and threat intelligence into repeatable, measurable control validation. You will assess significant changes and deployments across cloud, infrastructure, artificial intelligence, and model supply-chain environments, confirming that agreed safeguards perform effectively before services move into operation.

Success in this role means that material attack techniques are translated into relevant tests quickly, findings are accurately consolidated and prioritised, and remediation is tracked through to evidence-based closure. Working within the established lines-of-defence model, you will provide rigorous first-line validation against approved scenarios while preserving the independence of second-line red teaming and assurance.

• Plan and execute continuous blue-team validation for significant technology deployments across cloud, infrastructure, artificial-intelligence, and model supply-chain environments.
• Translate the approved threat coverage matrix into practical validation scenarios, test cases, and release-readiness evidence.
• Monitor MITRE ATLAS, OWASP Large Language Model, and related intelligence sources for techniques relevant to banking environments.
• Convert newly identified attack methods into repeatable automated or semi-automated tests within the agreed seven-day service-level target.
• Use autonomous penetration-testing and adversarial validation capabilities to assess control effectiveness without disrupting critical services.
• Coordinate with security, engineering, risk, and technology stakeholders to schedule testing around significant deployments and material changes.
• Consolidate, deduplicate, classify, and maintain findings through platforms such as Defect Dojo and Attestation.
• Track remediation against severity-based service-level agreements and verify corrective evidence before recommending closure.
• Apply mean-time-to-remediation gates and confirm that unresolved material issues are addressed before redeployment approval.
• Produce reliable management information covering open findings, remediation performance, pipeline gate outcomes, control coverage, and prompt-injection blocking rates.
• Maintain clear records distinguishing first-line control validation from independent unknown-scenario red teaming conducted by the second line of defence.
• Contribute to the continuous improvement of testing methods, automation, reporting, and threat-informed assurance across the security lifecycle.

• Several years of practical experience in cyber security engineering, blue-team operations, offensive security, security validation, or a closely related discipline.
• Demonstrable experience replacing periodic manual penetration testing with continuous or automated control validation.
• Strong knowledge of cloud security, infrastructure security, vulnerability management, and deployment or pipeline assurance.
• Hands-on familiarity with autonomous penetration-testing platforms, including AWS Security Agent, Horizon3, or comparable tools.
• Practical experience assessing artificial-intelligence systems with tools such as Garak, PyRIT, Claude Security, Opus 4.x, Codex, or equivalent solutions.
• Ability to design and maintain tests aligned to the OWASP Large Language Model Top 10, MITRE ATLAS, and relevant adversarial security frameworks.
• Experience converting threat intelligence into actionable test scenarios, automation workflows, and measurable control outcomes.
• Comfort working with defect-management, evidence-management, dashboarding, and workflow-automation platforms.
• Understanding of financial-services security, regulatory expectations, risk-based prioritisation, and the need to protect availability and customer data.
• Clear understanding of first-line and…