- Lead the appsec strategy for a leading FS firm
- Drive AI powered security innovation
- Lead the appsec strategy for a leading FS firm
- Drive AI powered security innovation
About Our Client
Leading organisation in Abu Dhabi.
Job Description
- Lead and mature the Application Security programme across software engineering teams.
- Own and manage Static Application Security Testing (SAST) platforms, policies, and processes.
- Drive secure code practices throughout the software development lifecycle (SDLC).
- Manage source repository security within GitLab, ensuring strong security controls across code repositories and development pipelines.
- Oversee vulnerability management activities, including identification, prioritisation, remediation tracking, and reporting.
- Establish application security standards, frameworks, and governance across development teams.
- Partner closely with engineering leaders to build security capabilities and embed security-by-design principles.
- Design and deliver secure coding training programmes for software engineers.
- Introduce and operationalise AI-assisted application security capabilities to improve vulnerability detection, code review, and remediation efficiency.
- Evaluate and govern the security risks associated with AI coding assistants, AI-generated code, and LLM-enabled applications.
- Drive adoption of security tooling, metrics, and reporting to improve software security posture.
- Provide subject matter expertise on secure architecture, secure development practices, and application security controls.
- Collaborate with DevOps, Cloud, and Platform Engineering teams to secure cloud-native applications, containers, and CI/CD environments.
You will have technical ownership of:
- SAST strategy, tooling, and governance.
- Source repository security within the GitLab ecosystem.
- Dependency and software supply chain security.
- Vulnerability monitoring, oversight, and remediation governance.
- AI-driven application security initiatives and tooling.
- Secure coding standards and engineering enablement.
- Security controls across cloud-native applications and containerised workloads.
The Successful Applicant
- 7+ years' experience in Software Engineering and/or Application Security, including 3+ years in a dedicated Application Security role.
- Hands on experience with SAST, dependency scanning, vulnerability management, and secure SDLC practices.
- Strong experience securing source code repositories and CI/CD pipelines, ideally within GitLab environments.
- Proficiency in at least two of Python, Java, Go, or TypeScript.
- Experience with cloud native application security, container security, and DevSecOps practices.
- Strong knowledge of OWASP Top 10, OWASP Top 10 for LLM Applications, and secure coding principles.
- Experience evaluating and implementing AI driven security tooling and managing risks associated with AI generated code and coding assistants.
- Familiarity with ISO 27001 and application security governance frameworks.
- Previous experience within Financial Services, Banking, or FinTech environments preferred
What's on Offer
- Opportunity to lead and shape a modern Application Security function within a growing financial services organisation.
- Exposure to cutting edge AI security initiatives and secure software engineering practices.
Contact: Ruwise Sheriff
Quote job ref: JN-102026-7136686
#J-18808-Ljbffr