Application Security Doha, Qatar Posted on 09/06/2026 Trending

Malomatia; Doha; On-site; QAR 180,000 - 280,000; Full time

Job summary

Malomatia seeks an Application Security Specialist to secure client applications across their lifecycle. You will conduct penetration tests, automate security scans, and assess vulnerabilities in web, mobile, and API apps.

You will collaborate with development and DevOps teams to integrate security into CI/CD pipelines, triage findings, and provide actionable remediation guidance to developers.

Qualifications

• Hands-on testing across web, mobile, and API apps.
• Experience with SAST/DAST/SCA and secure code review.
• Ability to translate findings into actionable remediation.
• Collaborate with devs/DevOps to secure CI/CD pipelines.

Responsibilities

• Conduct application penetration testing and security assessments.
• Run automated security scanning and threat modelling activities.
• Provide remediation guidance and follow-up on fixes.
• Embed security practices across the software development lifecycle.

Skills

Penetration testing

Security testing

Threat modelling

Secure code review

SAST

DAST

SCA

CI/CD security

DevOps collaboration

Analytical skills

Tools

SAST tools

DAST tools

SCA tools

Job description

We are seeking a skilled Application Security Specialist to join our Cybersecurity Practice. In this role, you will work closely with our application security, development, and QA teams to secure our clients’ applications across their entire lifecycle. You will conduct security testing, perform penetration tests, and assess vulnerabilities across web, mobile, API applications.

Your responsibilities will span application penetration testing, automated security scanning (SAST, DAST, SCA), threat modelling, secure code review, and developer enablement. You will embed security best practices throughout the software development lifecycle and ensure that applications are designed and built with robust security controls.

You will collaborate with development and DevOps teams to integrate security into CI/CD pipelines, triage and validate findings, and provide clear, actionable remediation guidance. The role requires hands-on technical expertise, strong analytical skills, and the ability to translate complex security findings into practical fixes that developers can implement.