About Us: Astra Tech is a dynamic technology group based in Abu Dhabi, on a mission to build the region’s most comprehensive consumer technology ecosystem – powered by AI, designed for scale, and built around the everyday needs of people across the Middle East and beyond. Its flagship platform, botim, is the UAE’s leading all-in-one platform that unifies messaging, payments, remittances, government services, and more, serving millions of users in the region and globally. At the core of Astra Tech’s ecosystem is Ultra, the region’s first AI-native platform with human-like capabilities that connects people, services, and intelligence.

About the Role: We are looking for a hands-on Senior Cybersecurity Architect/Engineer specialising in offensive security, Red Team and Purple Team operations, AI security and enterprise security architecture. This role is both strategic and deeply technical – you will shape Astra Tech’s security posture across products and platforms, lead offensive security engagements, and guide the design of resilient security architectures.

Responsibilities: 1. Offensive Security Operations: Lead and execute red team engagements across Astra Tech’s products and infrastructure; Plan, scope, and deliver penetration testing and vulnerability assessment programs; Coordinate and manage external VAPT providers and security testing engagements; Develop custom tools, scripts, and automation to enhance offensive security capabilities. 2. AI Security: Design and implement security controls for LLM-powered applications and AI systems; Assess and mitigate AI-specific risks (prompt injection, model extraction, data leakage, adversarial attacks); Develop secure AI development practices and guardrails for AI/ML teams; Stay current with emerging AI security threats and countermeasures. 3. Security Architecture & Engineering: Design and review enterprise security architecture across cloud and on-premises environments; Develop security reference architectures and design patterns for engineering teams; Lead threat modelling exercises for new products and features; Define security requirements and standards for development teams. 4. Detection & Response: Improve SIEM detection content and incident response playbooks; Lead technical investigations during security incidents; Develop detection-as-code capabilities and automation; Mentor SOC analysts on advanced detection techniques. 5. DevSecOps & Secure SDLC: Integrate security testing (SAST, DAST, SCA, IaC scanning) into CI/CD pipelines; Design secure CI/CD architecture and artifact management; Automate security gates and compliance checks; Champion secure coding practices across engineering teams. 6. Cloud Security: Design cloud security architecture and guardrails for AWS/Azure/GCP environments; Implement infrastructure-as-code security controls and policies; Lead cloud security posture assessments and remediation; Design and implement zero-trust architecture principles. 7. Governance & Compliance: Support compliance initiatives (PCI DSS, ISO 27001, SOC 2, UAE PDPL); Develop security policies, standards, and procedures; Conduct security awareness training for technical teams; Represent security in architecture review boards and technical forums.

Requirements: Bachelor’s degree in Computer Science, Information Security, or a related field; 8+ years of cybersecurity engineering/architecture experience, including 5+ years leading offensive security initiatives; Deep expertise in penetration testing methodologies and tools; Strong experience with red team operations and adversary simulation; Hands-on experience with cloud security (AWS/Azure/GCP); Strong understanding of application security (OWASP, secure coding practices); Experience with SIEM, SOAR, and security automation; Knowledge of container security and Kubernetes; Experience with CI/CD security integration; Strong scripting skills (Python, Bash, PowerShell); Relevant certifications: OSCP, OSCE, GPEN, GXPN, CISSP, or equivalent; Experience with AI/ML security concepts and LLM application security; and Excellent communication skills with the ability to explain technical concepts to non-technical stakeholders.

Location: Abu Dhabi, United Arab Emirates. Technology, Security. This is a full-time role with Astra Tech. Published 2026-10-29.

Source: Astra Tech careers. Apply here: https://careers.astratech.ae/jobs/8636602-offensive-security-ai-security-senior-expert