Application Security Engineer - DevSecOps

Dicetek LLC is seeking an experienced Application Security Engineer with strong expertise in penetration testing, secure code review, Dev Sec Ops  and cloud security for a full-time, on-site opportunity in Abu Dhabi, United Arab Emirates. The role focuses on identifying and mitigating security risks across web applications, mobile applications, APIs, cloud environments and containerized infrastructure. The successful candidate will contribute to secure software development practices, automate security controls within CI/CD pipelines and work closely with engineering teams to strengthen application and infrastructure security.

This position requires a combination of hands‑on technical security capabilities, risk assessment experience and effective stakeholder communication.

• Country:
  United Arab Emirates
• City:
  Abu Dhabi
• Industry: I T and Services
• Function:
  Computer-Network Security
• Salary:
  Not disclosed
• Gender: No Preference
• Candidate Nationality:
  Not specified
• Job Type: Full Time
• Work Arrangement:
  On-site

• Conduct penetration testing across web applications, mobile applications and APIs to identify security vulnerabilities.
• Perform secure code reviews to detect weaknesses in application source code, scripts and configuration files.
• Recommend remediation measures and work with technical teams to address identified vulnerabilities.
• Configure, optimize and manage security scanning tools covering static application security testing (SAST), dynamic application security testing (DAST) and software composition analysis (SCA).
• Assess Infrastructure as Code (IaC) configurations and container environments using appropriate security scanning technologies.
• Lead threat modeling activities and evaluate application security risks throughout the development lifecycle.
• Dev Sec Ops  and Security Automation
  - Drive Dev Sec Ops  initiatives by integrating security practices into software development and deployment processes.
• Implement and enhance automated security controls within continuous integration and continuous delivery pipelines.
• Develop scripts and automation workflows using Python, Bash or similar technologies.
• Collaborate with development and Dev Ops teams to identify security issues early and support timely remediation.
• Promote secure development practices through practical security automation and technical guidance.
• Cloud and Container Security
  - Assess and improve security controls across AWS and Microsoft Azure environments.
• Strengthen the security posture of Kubernetes clusters, Docker environments, container runtimes and supporting infrastructure.
• Review application, cloud and infrastructure architecture to identify security weaknesses and potential risks.
• Contribute to secure architecture design and provide recommendations aligned with established security principles.
• Support security reviews for containerized applications and cloud-native deployment environments.
• Risk Management and Incident Response
  - Lead security risk assessments, threat modeling and vulnerability management activities.
• Evaluate technical findings and communicate their potential impact to relevant stakeholders.
• Recommend practical risk mitigation measures based on identified vulnerabilities and security requirements.
• Participate in security incident response activities and contribute to post-incident reviews.
• Help ensure lessons learned from security incidents are incorporated into future security improvements.
• Monitor emerging cybersecurity threats, attack techniques and security technologies to maintain awareness of evolving risks.
• Security Awareness and Collaboration
  - Develop and deliver security awareness sessions, technical training and best-practice workshops.
• Work closely with software development, Dev Ops, infrastructure and product teams to promote secure system design and delivery.
• Provide security guidance to technical and non-technical stakeholders.
• Translate complex security risks into clear, actionable recommendations for business and leadership teams.
• Encourage a collaborative security culture and support continuous improvement in security practices.

• 7-12 years of professional experience in information security roles.
• Demonstrated…