Location: Abu Dhabi (Onsite)

Contract: Initial 6 months subject to extension

Availability: Immediate Start Preferred

International candidates are welcome to apply, with preference given to candidates who are currently based in the UAE. Visa sponsorship will be provided for successful candidates; however, relocation expenses, including flights and accommodation, will not be covered.

Job Summary

We are looking for a highly skilled Senior Manager - Cyber Security Engineers to lead Continuous Security Validation and offensive security activities within a regulated banking environment. This role is ideal for a hands-on cybersecurity professional with extensive experience in penetration testing, adversary simulation, threat-driven security testing, and AI security assessments.

You will be responsible for validating security controls through continuous testing, managing security findings across the vulnerability lifecycle, and operationalizing emerging threats into actionable security test scenarios. The successful candidate will play a key role in strengthening the organization's cyber resilience through automated security validation and AI red teaming initiatives.

Key Responsibilities

Lead Continuous Security Validation programs across cloud, infrastructure, applications, and AI systems.
Design and execute offensive security assessments including penetration testing and adversary simulation activities.
Develop and maintain threat-based security testing aligned to MITRE ATT&CK and MITRE ATLAS frameworks.
Conduct AI/LLM security testing, prompt injection assessments, and AI red teaming exercises.
Operationalize new threat intelligence into validation and testing frameworks.
Manage vulnerability findings through remediation and re-validation processes.
Drive remediation SLA compliance and support severity-based deployment approval controls.
Collaborate with engineering, DevOps, and security teams to improve security posture.
Develop dashboards and reporting metrics covering security findings, MTTR, and security validation outcomes.
Support secure deployment processes through continuous security assessment practices.

Required Qualifications

8-10 years of cybersecurity experience with a strong focus on offensive security.
Extensive hands-on experience in:
Penetration Testing
Red Team Operations
Adversary Simulation
Vulnerability Management
Security Validation
Threat Intelligence
AI Security Testing
Experience building or managing continuous security validation programs.
Strong knowledge of:
OWASP Top 10
OWASP LLM Top 10
MITRE ATT&CK
MITRE ATLAS
Experience in banking, financial services, or highly regulated environments.
Understanding of control validation within a Three Lines of Defense framework.
Hands-on experience with tools such as:
AWS Security Agent
Horizon3
Garak
PyRIT
DefectDojo
Jira
Claude Security
Codex

Mandatory Certifications

OSCP or OSCE

Preferred Qualifications

CREST CCT certification
GIAC GPEN or GXPN
GIAC GMLE or equivalent AI Security certification
Experience conducting AI red teaming and LLM security assessments.
Familiarity with modern autonomous penetration testing platforms.
Experience supporting security programs within regulated banking environments.

Ideal Candidate Profile

Strong offensive security background.
Hands-on technical leader who can guide engineering teams while remaining actively involved in testing and validation activities.
Experienced in automated security testing and threat-driven security programs.
Comfortable engaging with security governance, risk, and compliance stakeholders.
Able to operate in fast-paced environments with strict remediation and regulatory requirements.