Security Engineer (Platform&Tooling)-Relocate to Dubai

Position Overview The Security Engineer, Platform & Tooling owns the shared automation backbone that serves both security-operations teams (Red, Blue, Purple) and the product SDLC. The mandate is twofold: Eliminate operational toil by building reliable pipelines for scans, telemetry, and evidence management.Embed security into DevOps workflows (DevSecOps) so vulnerabilities are identified and remediated early.Core Responsibilities 1. CI/CD & DevSecOps Automation• Integrate SAST (Semgrep), DAST (ZAP, Burp), and SCA scanners into GitHub/GitLab pipelines.• Enforce IaC and container-image checks (Terraform, CloudFormation, Dockerfile linters).• Publish build-stage security metrics (OWASP risk tags, pass/fail gates) to engineering dashboards.2. Offensive & Defensive Tooling• Orchestrate bulk scans (ZAP, Nuclei, Semgrep) outside the SDLC for red-team engagements.• Parse SARIF/JSON outputs and route findings to DefectDojo and Jira with de-duplication logic.3. Telemetry Ingestion & SIEM/XDR Pipelines• Maintain schemas, enrichment, and data-quality checks for Windows/M365, AWS, and Azure logs.• Monitor pipeline health via automated SLIs/SLOs; trigger self-healing routines where feasible.4. Reusable Artefact Curation• Standardize Nuclei templates, Burp/ZAP add-ons, Sigma rules, and threat-hunt notebooks.• Version and distribute through an internal registry; provide CLI tooling for one-command deployment.5. Lab & Sandbox Infrastructure• Operate disposable AD forests, cloud sandboxes, and target containers for red/purple exercises.• Provide “one-click” Terraform/Ansible scripts that bootstrap environments in < 15 minutes.6. Process Optimization & Practitioner UX• Conduct quarterly time-motion studies to locate manual pain points.• Produce concise documentation and in-tool help to maximize adoption by security analysts and developers.7. Metrics & Continuous Improvement• Report KPIs (see below) to leadership; maintain a roadmap aligned with both Ops and SDLC priorities.