Senior Security Engineer – Vulnerability Management

Deriv is seeking a Senior Security Engineer specializing in Vulnerability Management to join their team in Dubai, United Arab Emirates. This role focuses on building an automated, AI-driven system to identify and close risks before they become incidents, rather than just running scans.

Deriv is a global fintech company connecting millions of customers across 150+ countries to financial markets, processing millions of transactions daily with an AI-first approach. They are committed to innovation and employee growth, holding Great Place to Work certifications in multiple countries.

If you are passionate about architecting automation-first vulnerability engines at a global scale and want to be the technical authority, apply now to transform vulnerability management into an intelligence-driven function.

Company Overview

The Deriv Group of companies connects 3 million customers across 150+ countries to the world's financial markets, processing millions of transactions every day. With an AI-first mindset, they are transforming the industry. Their global team of 1,000+ innovators across 20 offices are empowered with access to bleeding-edge LLMs and advanced frameworks. Deriv's culture encourages exploration, creativity, and calculated risk-taking, leading to global recognition as a Great Place to Work.

Quick Details

• Salary Range: Not Specified
• Job Type: Full-time
• Qualifications: bachelors-degree
• Experience: 10 Year+

Key Responsibilities

• Own the full vulnerability lifecycle: discovery, enrichment, prioritization, remediation, validation, and executive reporting.
• Lead the operation and optimization of Qualys VMDR across various cloud and infrastructure environments.
• Implement risk-based prioritization using CVSS, EPSS, CISA KEV, and exploit intelligence.
• Define and enforce remediation SLAs and reduce exposure windows (MTTR).
• Correlate vulnerability findings with CSPM insights, IAM exposure, and threat intelligence.
• Design automated workflows for vulnerability intake, ticket creation, and remediation validation.
• Use AI to enrich vulnerability context and implement secure automated patching.

Requirements

• 8-12+ years of cybersecurity experience with deep specialization in vulnerability management.
• Expert-level experience with Qualys VMDR or equivalent (Tenable, Rapid7).
• Strong understanding of exploit intelligence, risk scoring models, and vulnerability lifecycle governance.
• Hands-on experience across cloud security (AWS, GCP, Azure), CSPM integrations, endpoint patching, and SIEM/EDR correlation.
• Strong automation capability: Python, Bash, API integrations, workflow automation.
• Experience implementing AI-assisted prioritization or remediation workflows.
• Proven ability to build dashboards and KPIs that influence executive decisions.
• Experience operating in regulated environments (ISO 27001, GDPR, PCI-DSS, DORA).
• Strong communicator who can translate technical exposure into business risk.

Benefits

• High ownership and strategic influence within a global fintech security organization.
• Room to architect automation-first vulnerability management at scale.
• Direct impact on enterprise risk reduction.
• Competitive compensation.
• Long-term leadership growth path.