Security Engineer; Cloud & AI Focus

Security Engineer

Bayzat is at the forefront of transforming workplaces through innovative solutions in HR, Payroll, Finance, and Insurance. Renowned as a leading SaaS platform for employee benefits and a key player in the Insurance sector, we are committed to our mission: empower every company to create a remarkable workplace by supercharging people processes and payments. As one of the MENA region's fastest-growing Scale-Ups, Bayzat is celebrated for its innovative product offerings, backed by over 300 team members from 35+ nationalities.

Recognized by Forbes as a promising UAE-based startup and supported by leading VCs like Mubadala and Point
72 Ventures, we are among the best-funded HRTech scale-ups in the region. At Bayzat, culture is paramount. We are a principle-driven, merit-based organization where authenticity, collaboration, and unpretentiousness thrive. Joining Bayzat means immersing yourself in an environment of high achievers, tackling complex challenges, and constantly striving for success. Our culture inspires continuous learning and excellence, allowing you to work with and be inspired by some of the brightest minds in the industry.

Our journey to success is anchored in our commitment to innovation, empowering businesses with features designed to optimize efficiency and elevate employee experiences. Whether enhancing people processes, streamlining payments, or enabling smarter decisions, Bayzat is redefining what it means to create a truly remarkable workplace.

We are looking for a forward-thinking Security Engineer to evolve our security posture from "gatekeeper" to "enabler." You will not just find bugs; you will architect the automated guardrails that allow our developers to ship code fast and securely. As a core member of the Engineering team, you will tackle security challenges across our entire stack; from traditional Web/Mobile apps and Cloud Infrastructure (AWS) to our emerging AI-driven features.

You will play a pivotal role in defining how we secure Generative AI integrations and protect our customer data in an era of evolving threats.

• Secure the AI Frontier:
  Lead threat modeling and security reviews for new product features, specifically focusing on LLM (Large Language Model) integrations. You will mitigate risks such as Prompt Injection, Data Poisoning, and Model Theft (adhering to the OWASP Top 10 for LLMs).
• Shift-Left Security:
  Embed security into the SDLC. Integrate SAST, DAST, and SCA (Software Composition Analysis) tools directly into our CI/CD pipelines to catch vulnerabilities before they reach production.
• Vulnerability Management:
  Move beyond manual reporting. Triage results from automated scans and Bug Bounty programs, and work directly with developers to implement remediation patches.

• Cloud-Native Protection:
  Harden our AWS environment using industry best practices (CIS Benchmarks)
• Infrastructure as Code (IaC) Security:
  Review and secure Terraform/Cloud Formation scripts to ensure infrastructure is secure by design before it is deployed.
• Container Security:
  Implement security controls for Docker containers and Kubernetes (K8s) clusters, ensuring isolation and minimizing the attack surface.

• Automate Everything:
  Use Python, Go, or Bash to write scripts that automate repetitive security tasks, alerting, and incident response workflows.
• Security Champions:
  Mentor developers and product managers. Run internal workshops on secure coding practices (including safe use of AI coding assistants like Copilot).
• Incident Response:
  Detect, investigate, and respond to security anomalies using modern SIEM tools.

• Experience:
  
  3+ years in Security Engineering, Dev Sec Ops , or a related field.
• Coding:
  Proficiency in at least one scripting language (Python, Go, or Ruby) to read code and write automation tools.
• Cloud Fluency:
  Deep understanding of AWS services (IAM, VPC, Guard Duty, WAF, Inspector) and container orchestration (Kubernetes)
• App Sec Tooling:
  Hands-on experience with tools…