Senior Cybersecurity Architect and Engineer

Job Snapshot
- Role: Senior Cybersecurity Architect and Engineer
-

Location:
Abu Dhabi, United Arab Emirates
- Industry: Banking
- Function: Computer-Network Security
-

Experience:
8 years in cybersecurity, including at least 3 years in banking or financial services
-

Job Type
Full Time
- Work Arrangement: On-site

Dicetek LLC is seeking an experienced Senior Cybersecurity Architect and Engineer for a full-time, on-site opportunity in Abu Dhabi, United Arab Emirates. The role focuses on strengthening cybersecurity architecture, engineering security controls, securing banking applications and infrastructure, and maintaining alignment with applicable UAE banking regulations and international security standards. The successful candidate will bring extensive cybersecurity experience, including a minimum of three years within banking or financial services. The position requires strong technical expertise across security architecture, SIEM and SOAR technologies, endpoint protection, identity security, cloud environments, application security and cybersecurity risk management. The role covers critical banking systems, payment infrastructure, digital banking channels, enterprise networks and hybrid cloud environments. Candidates should demonstrate the ability to evaluate security risks, implement effective technical controls and support regulatory compliance across complex financial technology environments.

• Security Architecture and Engineering
  - Conduct secure architecture and design reviews across the bank 's technology infrastructure and business applications.
  - Assess cybersecurity controls supporting core banking platforms, financial transaction systems and payment infrastructure.
  - Review security architecture for UAE payment systems, including UAEFTS, Instant Payment Platform (IPP) and Aani.
  - Evaluate security requirements for card switching platforms, SWIFT infrastructure, ATM networks and branch connectivity.
  - Review security controls across enterprise data platforms, digital banking applications and mobile banking channels.
  - Assess the security architecture of open finance APIs and connected financial services.
• Zero Trust and Network Segmentation
  - Drive the implementation and enhancement of zero trust security principles across enterprise infrastructure.
  - Define network segmentation requirements for data centres, branches and ATM networks.
  - Review security boundaries between internal networks, cloud environments and third
  - party connections.
  - Support appropriate network segmentation for operational technology and building management systems where applicable.
  - Evaluate network access controls and recommend improvements to reduce unauthorized access and lateral movement risks.
  - Coordinate with infrastructure and network teams to strengthen enterprise security architecture.
• Identity and Privileged Access Security
  - Define and assess identity security controls across enterprise IT systems and business applications.
  - Support Active Directory security hardening and identity infrastructure protection.
  - Review Identity and Access Management (IAM) configurations and access control practices.
  - Evaluate Privileged Access Management (PAM) controls, including technologies such as CyberArk.
  - Identify weaknesses in privileged access arrangements and recommend appropriate remediation.
  - Support consistent application of identity security requirements across relevant technology environments.
• Endpoint, Network and Data Protection
  - Engineer, configure and optimize Endpoint Detection and Response (EDR) and Extended Detection and Response (XDR) capabilities.
  - Support endpoint and server protection using technologies such as CrowdStrike Falcon and Microsoft Defender.
  - Review and tune Web Application Firewall (WAF) security controls.
  - Evaluate Data Loss Prevention (DLP) capabilities and associated protection requirements.
  - Strengthen email and collaboration platform security controls.
  - Review firewall and next-generation firewall configurations.
  - Recommend appropriate encryption standards and security practices.
  - Provide technical guidance on Hardware Security Modules (HSMs) and cryptographic key management.
• Application Security and DevSecOps
  - Integrate Static Application Security Testing (SAST), Dynamic Application Security Testing (DAST) and Software Composition Analysis (SCA) into CI/CD pipelines.
  - Define security quality gates and vulnerability triage processes for development teams.
  - Assess applications against the OWASP Top 10 security risks.
  - Evaluate APIs against the OWASP API Security Top 10.
  - Perform and guide secure code reviews for high-risk application changes.
  - Coordinate with development teams to identify and address application security weaknesses.
  - Define security baselines for microservices and containerized application environments.
  - Establish security r