Security Specialist

We are partnering with a UAE Federal Government Entity to help fill the following vacancy: Security Specialist

The role

You will be the security specialist on a large-scale digital programme in the UAE. New platform, new pipelines, new services, and you will be responsible for security across all of it. No inherited security team, no legacy processes to follow. You define the standards, embed them into the delivery, and make sure what ships is hardened. This is a hands-on role. You will work directly with backend, frontend, platform, and data teams to secure what they are building, not audit them after the fact.

What you will own:

• Pipeline security: SAST, SCA, and container image scanning integrated into CI/CD. You configure it, triage findings, and make sure vulnerabilities don't ship.
• Platform hardening: Kubernetes clusters, container registries, API gateways, secrets management, and IAM. You define the security baselines and enforce them.
• Application security: threat modelling, secure code review, and penetration testing across microservices and web applications.
• Security posture reporting: clear, actionable risk assessments for programme leadership. No checkbox compliance; real signal on what matters.

Requirements

• 5+ years in application security, infrastructure security, or DevSecOps
• Hands-on with Kubernetes security, CI/CD pipeline tooling, and container security
• Experience with IAM platforms and secrets management
• Comfortable with OWASP Top 10, CVE/CVSS, and threat modelling
• Can communicate security risk to non-technical stakeholders without losing fidelity
• Has worked in delivery environments, not just audit or compliance

Advantage

• Certifications: OSCP, CKS, CISSP, or equivalent
• Government or public sector programme experience
• Familiarity with GCC regulatory frameworks (NESA, ADHICS)
• Experience securing .NET, Angular, or similar enterprise stacks

Benefits

Visa plus medical insurance

Further benefit details will be provided by our client to successfully shortlisted candidates.

Reminder: We are partnering with a client to help fill this vacancy.

The successful candidate will be employed by our client, not Whiteshield.