Cyber Security Engineers (Blue Team)

Location: Abu Dhabi, United Arab Emirates; onsite employment.

Company

Established in 1985, the client is a regulated banking institution providing retail, wealth management, commercial, corporate finance, investment banking, and cash management services.

What you will do

• Plan and execute continuous blue-team validation for significant cloud, infrastructure, artificial-intelligence, and model supply-chain deployments.
• Translate threat coverage and intelligence into validation scenarios, test cases, automated or semi-automated tests, and release-readiness evidence.
• Monitor MITRE ATLAS, the OWASP Large Language Model Top 10, and related sources, converting relevant attack methods into tests within the agreed seven-day service-level target.
• Use autonomous penetration-testing and adversarial validation capabilities without disrupting critical services.
• Coordinate testing with security, engineering, risk, and technology stakeholders around significant deployments and material changes.
• Manage findings, remediation evidence, severity-based service-level agreements, deployment gates, management information, and the distinction between first-line validation and second-line independent assurance.

Requirements

• Several years of practical experience in cyber security engineering, blue-team operations, offensive security, security validation, or a closely related discipline.
• Demonstrable experience replacing periodic manual penetration testing with continuous or automated control validation.
• Strong knowledge of cloud security, infrastructure security, vulnerability management, and deployment or pipeline assurance.
• Hands-on familiarity with autonomous penetration-testing platforms, including AWS Security Agent, Horizon3, or comparable tools.
• Practical experience assessing artificial-intelligence systems using Garak, PyRIT, Claude Security, Opus 4.x, Codex, or equivalent solutions.
• Ability to design and maintain tests aligned with the OWASP Large Language Model Top 10, MITRE ATLAS, and relevant adversarial security frameworks.
• Experience converting threat intelligence into actionable test scenarios, automation workflows, and measurable control outcomes.
• Experience with defect-management, evidence-management, dashboarding, and workflow-automation platforms.
• Understanding of financial-services security, regulatory expectations, risk-based prioritisation, availability, and customer-data protection.
• Clear understanding of first-line and second-line responsibilities and the distinction between approved control validation and independent assurance.
• Strong analytical and investigative skills, including the ability to interpret technical findings and communicate business impact to varied stakeholders.
• Excellent written and verbal English, with precise documentation, remediation records, and executive-ready reporting.

Culture & Benefits

• Direct responsibility for improving cyber resilience across a diversified banking environment.
• Exposure to cloud infrastructure, autonomous testing, artificial intelligence, large-language-model risks, and model supply chains.
• Opportunity to influence threat intelligence, automated testing, remediation governance, and deployment gates at scale.
• Access to established security platforms, workflow automation, vulnerability evidence, and performance dashboards.
• Professional growth in emerging AI-security practices and threat-informed control assurance.
• Abu Dhabi-based employment with visibility across technology, security, risk, and operational stakeholders, plus a competitive package.