DevSecOps Engineer (UAE)

This is a remote position.

• Location: Remote – UAE

• Requirement: A Valid UAE work permit/employment visa is mandatory.

Employment type: Independent Contractor

We are looking for a hands-on DevSecOps Engineer to own, secure, and scale our infrastructure and deployment pipelines. You will work directly with our engineering team to embed security into our CI/CD workflows, manage vulnerabilities, and ensure our financial trading systems are resilient, compliant, and highly available.

Key Responsibilities

Pipeline Security & Automation

• Design, maintain, and harden CI/CD pipelines across our delivery lifecycle.

• Integrate automated security testing tools, including SAST, DAST, dependency scanning, and container scanning, directly into development workflows.

• Proactively suggest automation improvements to reduce manual overhead and accelerate secure software delivery.

Vulnerability & Risk Management

• Lead end-to-end vulnerability management, including triage, remediation tracking, and cross-team reporting.

• Audit existing infrastructure and deployment workflows to identify gaps, risks, or inefficiencies.

• Contribute to disaster recovery (DR), business continuity (BC), and robust change management processes to guarantee platform resilience.

Compliance & Data Protection

• Support the secure handling of sensitive and regulated financial data across all environments.

• Work closely with the Compliance team to implement security controls and collect evidence for external audits.

• Document all security architecture, pipeline logic, and automated rules for team handoff and future maintenance.

• Promote a security-aware engineering culture through modern tooling, clear documentation, and proactive knowledge sharing.

Requirements

• 5 years of demonstrable experience in a DevOps, SRE, or DevSecOps role within a production environment for financial services.

• Proven experience building, maintaining, and hardening CI/CD tooling and infrastructure as code.

• Deep understanding of relevant security frameworks and standards (e.g., ISO 27001, PCI DSS, SOC 2).

• Practical exposure to database high availability tooling and managed datastore operations.

• Strong understanding of modern data models, containerization, and cloud security architecture.

• Excellent English communication skills — you will work closely with global teams and document critical infrastructure logic.

• Relevant industry certifications (e.g., AWS Certified Security, Certified DevSecOps Professional, CISSP, or equivalent) are highly preferred.

• Background in financial technology, SaaS environments, or secure cloud-native infrastructure best practices.