Job description

Emirates Telecommunications Group Company PJSC runs a large application estate and domain portfolio, and this Senior Manager position in Dubai owns the security strategy that protects them. DevSecOps, application security and domain security make up the core of the remit, with strategies aligned to corporate and regulatory requirements. Security controls need to be built into CI/CD pipelines so that secure development lifecycle practices hold across every application team. On the application side, you run a program covering secure coding standards, threat modeling and penetration testing. Domain assessments check compliance with internal and governmental regulations, and technical reports from those assessments come to you for review before remediation recommendations go out. Strategic objectives are translated into measurable KPIs, then tracked and adjusted as needed. Licensing for security tools, resource utilization and project timelines also need watching to keep coverage cost-effective. A team relies on your technical and managerial guidance, particularly on complex assessments and escalations. Eight years in information security focused on application and network security is required, along with a bachelor's degree in Computer Science or Information Security and solid knowledge of DNS, TLS/SSL and certificate management.