DevSecOps Engineer (UAE)

This is a remote position.

• Location: Remote – UAE
  
• Requirement: A Valid UAE work permit/employment visa is mandatory.
• Employment type: Independent Contractor
  

We are looking for a hands-on DevSecOps Engineer to own, secure, and scale our infrastructure and deployment pipelines. You will work directly with our engineering team to embed security into our CI/CD workflows, manage vulnerabilities, and ensure our financial trading systems are resilient, compliant, and highly available.

Key Responsibilities

Pipeline Security & Automation

• Design, maintain, and harden CI/CD pipelines across our delivery lifecycle.
  
• Integrate automated security testing tools, including SAST, DAST, dependency scanning, and container scanning, directly into development workflows.
  
• Proactively suggest automation improvements to reduce manual overhead and accelerate secure software delivery.
  

Vulnerability & Risk Management

• Lead end-to-end vulnerability management, including triage, remediation tracking, and cross-team reporting.
  
• Audit existing infrastructure and deployment workflows to identify gaps, risks, or inefficiencies.
  
• Contribute to disaster recovery (DR), business continuity (BC), and robust change management processes to guarantee platform resilience.
  

Compliance & Data Protection

• Support the secure handling of sensitive and regulated financial data across all environments.
  
• Work closely with the Compliance team to implement security controls and collect evidence for external audits.
  
• Document all security architecture, pipeline logic, and automated rules for team handoff and future maintenance.
  
• Promote a security-aware engineering culture through modern tooling, clear documentation, and proactive knowledge sharing.
  

Requirements

• 5 years of demonstrable experience in a DevOps, SRE, or DevSecOps role within a production environment for financial services.
  
• Proven experience building, maintaining, and hardening CI/CD tooling and infrastructure as code.
  
• Deep understanding of relevant security frameworks and standards (e.g., ISO 27001, PCI DSS, SOC 2).
  
• Practical exposure to database high availability tooling and managed datastore operations.
  
• Strong understanding of modern data models, containerization, and cloud security architecture.
  
• Excellent English communication skills — you will work closely with global teams and document critical infrastructure logic.
  
• Relevant industry certifications (e.g., AWS Certified Security, Certified DevSecOps Professional, CISSP, or equivalent) are highly preferred.
  
• Background in financial technology, SaaS environments, or secure cloud-native infrastructure best practices.