Software Engineer -Application Security & Release Engineer

We have an urgent requirement for Software Engineer -Application Security & Release Engineer in banking domain (Preferred) is required for our banking clients in Abu Dhabi ,UAE

Deploy security patches and vulnerability fixes across banking and digital applications while ensuring system stability and minimal business impact.--Must

Develop and maintain automated regression testing frameworks to validate patches, releases, and application changes before production deployment.--Must

Remediate application and API security vulnerabilities aligned with OWASP Top 10 and OWASP API Security Top 10 standards, integrating security controls into CI/CD pipelines.-Must

Manage secure release processes including impact assessments, rollback planning, deployment verification, release documentation, and collaboration with DevOps, application, and security teams.-Must

Role purpose

• Apply secure software patches and updates across critical banking applications while protecting system stability through automated testing and controlled release practices.

Key responsibilities

• Deliver security patches and vulnerability fixes across core, corporate, consumer and digital platforms.


• Build and maintain automated regression tests for patch and release validation.


• Remediate application and API vulnerabilities aligned to OWASP Top 10 and OWASP API Security Top 10.


• Integrate security checks and patch validation into CI/CD pipelines.


• Prepare release notes, impact assessments, rollback plans and post-deployment verification evidence.


• Work with application, DevOps and security teams to resolve defects and release safely.

Required skills

• Enterprise software maintenance and secure release engineering


• Automated testing and regression frameworks


• API security and secure coding


• CI/CD pipelines and version control


• Application vulnerability remediation


• Release, change and rollback management

Key deliverables

• Validated security patches with regression evidence


• Remediated application and API vulnerabilities


• Release documentation, impact assessment and production verification

Certifications

• Relevant secure-development, cloud or DevOps certification desirable

Preferred tools / platforms

• Git and CI/CD tooling


• Automated test frameworks


• SAST/DAST/SCA tooling


• JIRA/Confluence


• API testing tools