Senior Manager - Cyber Security Engineers (Ref: 197823)

About the Role

Key Responsibilities

• Lead the strategy, roadmap, and daily operation of continuous cyber security control validation.
• Direct automated testing across cloud, infrastructure, AI applications, large-language-model use cases, and model supply chains.
• Maintain a threat-scenario coverage matrix aligned with business risk.
• Use Jira automation to manage MITRE ATLAS and OWASP LLM threat intelligence.
• Create validation tests from emerging attack methods and deploy them within agreed timeframes.
• Manage findings through aggregation, deduplication, ownership, and lifecycle controls.
• Set remediation targets and enforce deployment gates based on mean time to remediate.
• Partner with engineering, architecture, risk, and technology teams to resolve weaknesses.
• Maintain Power BI reporting on findings, remediation, pipeline gates, and threat coverage.
• Provide management information on exposure, trends, exceptions, overdue actions, and deployment assurance.
• Set standards for evidence quality, repeatability, traceability, and audit readiness.
• Separate first-line validation from second-line independent red teaming and challenge.

Requirements

• Extensive leadership experience in cyber security engineering, offensive security, adversarial validation, or comparable assurance functions.
• Experience replacing periodic manual penetration testing with continuous or automated validation.
• Strong understanding of cloud security, infrastructure security, application delivery pipelines, and security testing automation.
• Experience with autonomous penetration-testing platforms such as AWS Security Agent, Horizon3, or equivalent.
• Hands-on familiarity with AI red-teaming tools including Garak, PyRIT, Claude Security or Opus 4.x, and Codex.
• Experience aligning testing with the OWASP LLM Top 10 and MITRE ATLAS.
• Experience operationalising threat intelligence into repeatable tests, workflows, and service levels.
• Knowledge of finding management, vulnerability prioritisation, remediation governance, and deployment approval controls.
• Ability to define security metrics and communicate technical risk through dashboards and executive reporting.
• Understanding of first-line and second-line responsibilities and independent red teaming.
• Ability to lead technical specialists and influence senior stakeholders.
• Financial services, banking, or regulated-environment experience is advantageous.

Benefits

• Lead a high-impact cyber security capability supporting banking services.
• Shape the transition from periodic testing to continuous, intelligence-led validation.
• Work with modern offensive-security and AI-assurance tooling.
• Gain visibility of risk trends, remediation performance, and deployment assurance.
• Influence governance boundaries, engineering standards, and security outcomes.
• Build and develop a specialist team in a regulated financial institution.

Location

• The role is based in Abu Dhabi.