Job Overview

We are hiring an Application Security Engineer (Emiratisation) on behalf of a leading diversified holding group in the UAE. This role is ideal for UAE Nationals with a strong background in application and offensive security, looking to work across modern cloud, web, and DevSecOps environments.

The successful candidate will play a critical role in embedding security across the software development lifecycle (SDLC), performing hands-on security testing, and collaborating closely with development, product, and security teams.

Key Responsibilities

• Conduct secure design reviews, code reviews, and threat modelling across applications and platforms

• Lead application penetration testing and vulnerability assessments (Web, Mobile, API, Cloud)

• Partner with Development, Product, and Security teams to strengthen application security controls

• Drive remediation of security findings and support incident response activities

• Advocate secure coding practices and application hardening standards

• Ensure compliance with data protection regulations (GDPR and regional standards)

• Assess and secure cloud architectures across Azure, GCP, and OCI environments

• Translate DevSecOps security recommendations into actionable implementation plans

• Maintain security documentation and align processes with OWASP standards and frameworks

Required Skills & Experience

• 3–4 years of experience in Application Security or Offensive Security

• Hands-on expertise in Web, Mobile, API, Cloud, and Infrastructure Penetration Testing

• Strong experience in threat modelling, secure code review, and attack surface analysis

• Familiarity with CI/CD security practices and DevSecOps tools

• Scripting experience using Python, Bash, or PowerShell

• Proficiency with security tools such as Burp Suite, Metasploit, Nessus, Wireshark, Nmap, Cobalt Strike

• Solid understanding of Windows and Linux internals and cloud security concepts

Qualifications

• Bachelor’s degree in Computer Engineering, Information Security, or a related field

• Security certifications preferred:

  • OSCP, CEH

  • Cloud Security Certifications (Azure / GCP / OCI / AWS)

About the Company

TGC Consulting is a Dubai-based Human Resources Solutions provider, offering specialized Recruitment, Emiratisation, and HR Outsourcing services across the Middle East.