Senior Security Engineer- Digital 14, Abu Dhabi, UAE

 Senior Security Engineer- Digital 14, Abu Dhabi, UAE


Job Description


At Digital14, trust is at the heart of everything we do just because it is essential to every part of our connected digital world. Whether its enjoying the freedom of a protected internet, secure transactions or safe communications - we protect, transform and nurture today so that all people can flourish with the freedom to achieve their potential tomorrow. We are Digital14.

Senior Security Engineer

In This Role, You Will

    Handling Multiple projects simultaneously
    Coordinate medium/large security testing projects
    Review scope and findings of other team members
    Helping other team members to bypass in place security controls whenever required
    Analyse applications to understand how they work, where they have weaknesses and demonstrate how identified vulnerabilities can be exploited by developing Proof-of-Concepts
    Make a difference by conducting research on new techniques, security mitigations and identifying zero-day vulnerabilities
    Mentor and coach colleagues on technical topics.
    Assist management with certain requests
    Join a diverse team of passionate security experts as a valued member
    Perform peer-review
    Develop custom scripts for vulnerability discovery during projects
    Write comprehensive security assessment reports for developers and upper management
    Collaborate with a great team of security experts and work in a lab environment
    Propose mitigations for the security vulnerabilities identified in the Digital14 products
    Perform security reviews of requirements, design specifications, and code
    Raise awareness of our developers to security best practices
    Work closely with our Engineering teams to gain in-depth knowledge of our systems
    Offer support to engineering team to fix the identified security defects and/or security incidents.
    Consistently deliver on commitments on time and with quality
    Interest to further deepen product security expertise

To bring your dream to life, you will need:

    A degree in Computer Science, Computer Engineering or Electrical Engineering or obtained relevant security certifications
    8+ years of experience as a Penetration Tester (application/platform level)
    Deep understanding of various software security vulnerabilities, threats and attack vectors on different environments, and reverse engineering
    Experience in software and/or devices such as Operating Systems, ICS, smart cards, web servers, Smartphones, email servers, web applications, clients and readers etc.
    Software development experience in any of these languages: C/C++, C#, Java, JavaScript, PHP, Objective C)
    Strong foundation in computer architecture, network, web technologies, Operating Systems or embedded systems
    Understanding of iOS or Android Internals on Application as well as OS/kernel level
    Has an understanding of the internals on iOS such as IPC (Mach, XPC), Code Signing, Sandboxing, dyld shared cache etc
    Experience in binary analysis, debugging and exploit development and the relevant mitigation techniques for various class of vulnerabilities
    Understanding of cryptography, protocol analysis, threat modeling, vulnerability research and fuzzing
    Foundation in iOS/Android development of native, web and hybrid apps
    Experience of working with secure coding methodology, best practices and their implementation within engineering teams
    Strong foundations in computer architecture, network, web technologies, Operating Systems or embedded systems
    Excellent written and verbal communication skills; including the ability to convey highly technical information to non-technical audience

 

Desired Qualifications

    Experience with SAST, DAST, SCA, IAST tools;
    Understanding and experience on various cybersecurity technologies on Microservices and DevSecOps practices
    Understanding and hands-on experience in API security , Open source software Security (SCA) and Service mesh, CI-CD pipeline and various tools used
    Experience with modern development practices and tools like git, Kubernetes, Elasticsearch etc.
    Experience with threat modelling frameworks such as STRIDE PASTA and VAST
    Experience working with Security Maturity Model framework (e.g. BSIMM, SAMM, BSA)
    Everyday, we deliver trust in digital so our clients can innovate and fulfil their potential.
    We do this purpose-driven work because we want a trusted digital world where everyone thrives with the freedom to achieve their potential.
    We imagine what’s possible and bring powerful innovations to solve our clients’ most difficult challenges



Apply Here:
https://endi.fa.em8.oraclecloud.com/hcmUI/CandidateExperience/en/sites/CX/job/513

========================================================================

▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬
You may also submit your CV here >>>>>>>>
https://www.dubai-forever.com/submit-your-cv.html
▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬

Join general, and category-specific WhatsApp jobs groups to be notified of the latest jobs in the Middle East.

Navigate here, to read more:

https://www.dubai-forever.com/whatsapp-jobs.html

UAE/KSA/Oman/Qatar/Kuwait/Bahrain