Application Security Consultant: Pen Tests & Secure Coding

Malomatia; Doha; On-site; QAR 150,000 - 240,000; Full time

Job summary

Malomatia, a Qatar-based IT services and digital transformation leader, seeks an Application Security Engineer to strengthen security across web, mobile, APIs, and desktop applications. You will conduct tests, review code, and guide remediation efforts while enabling secure development practices.

The role involves delivering training to development teams, evaluating tools, and maintaining comprehensive security documentation to support a secure software lifecycle at Malomatia.

Qualifications

• Education: Bachelor's / college degree in Computer Science, Information Security, or a related field.
• Experience: At least 2 years of experience in application security, software development, or a related field.
• Certifications: Relevant certifications (e.g., BCSP, OSWA, OSWE, eWPT, eWPTX, SEC542) are highly desirable.
• Technical Skills: Proficiency with security testing tools such as Burp Suite (required), Fortify, SonarQube, and Postman (preferred). Strong understanding of secure coding practices and experience with at least one programming language.
• Knowledge: In-depth knowledge of application security principles and practices, familiar with security frameworks and guidelines (e.g., OWASP Top 10, ASVS, MASVS, WSTG, MSTG). Familiarity with DevSecOps practices and CI/CD pipelines is a plus.

Responsibilities

• Penetration testing on web, mobile, APIs, and thick client apps with remediation reports.
• Implement and manage automated security scanning tools (SAST, DAST, SCA) across all app types.
• Perform threat modelling and provide mitigation guidance.
• Review code for security vulnerabilities across platforms and advise remediation.
• Develop and deliver training on application security for development teams.
• Evaluate and recommend security testing tools and technologies.
• Create and maintain documentation on security assessments, vulnerability management, and security policies.

Skills

Secure coding practices

Security frameworks knowledge

Communication skills

Education

Bachelor’s degree in Computer Science or Information Security

Tools

Burp Suite

Fortify

SonarQube

Postman

Job description

Malomatia, a Qatar-based IT services and digital transformation leader, seeks an Application Security Engineer to strengthen security across web, mobile, APIs, and desktop applications. You will conduct tests, review code, and guide remediation efforts while enabling secure development practices.

The role involves delivering training to development teams, evaluating tools, and maintaining comprehensive security documentation to support a secure software lifecycle at Malomatia.