Application Security Engineer (AppSec Engineer) – Qatar | QAR 9,000 | 8-Month Extendable Contract

Zeroonesolutions; Qatar; On-site; QAR 91,000 - 109,000; Full time

Job summary

Zeroonesolutions in Qatar is seeking an experienced Application Security Engineer to join our technology team. The role focuses on application security testing, vulnerability assessment, secure development, and DevSecOps across apps, APIs, and CI/CD pipelines.

The ideal candidate has 3–7+ years in app security, with hands-on expertise in Burp Suite, OWASP ZAP, SAST/DAST/SCA, and cloud/Kubernetes security. This 8-month contract offers growth in enterprise security and training opportunities.

Qualifications

• 3–7+ years of relevant professional experience in application security or cybersecurity.
• Strong knowledge of OWASP security principles.
• Hands-on experience with VAPT.
• Proficiency with Burp Suite and OWASP ZAP.
• Experience with SAST, DAST, and SCA.
• Strong understanding of API Security and secure code review.
• Experience with DevSecOps and CI/CD security.
• Programming knowledge in Java, .NET, C#, or JavaScript.
• Understanding of cloud security concepts.
• Knowledge of Kubernetes security.
• Preferred certifications include OSCP, CEH, GWAPT, CSSLP, or CISSP.

Responsibilities

• Perform application security assessments and vulnerability testing.
• Conduct VAPT across applications, APIs, and supporting infrastructure.
• Identify, assess, document, and help remediate application security vulnerabilities.
• Perform secure code reviews across supported programming languages.
• Implement and support SAST, DAST, and SCA security practices.
• Conduct API security assessments and testing.
• Use security testing tools such as Burp Suite and OWASP ZAP.
• Apply OWASP security principles and industry best practices.
• Integrate application security controls into CI/CD pipelines.
• Support DevSecOps initiatives and secure software development processes.
• Collaborate with software developers, DevOps teams, infrastructure teams, and other stakeholders.
• Assess cloud and Kubernetes environments from an application security perspective.
• Provide recommendations to improve application security posture and reduce security risks.
• Support vulnerability remediation and security validation activities.

Skills

VAPT

CI/CD security

Cloud security

API security

DevSecOps

Education

Bachelor's degree in Computer Science, Cybersecurity, Information Security

Tools

Burp Suite

OWASP ZAP

SAST

DAST

SCA

Job description

Location

Qatar

Job Category

• Information Technology (IT) & Software
• Cybersecurity
• Engineering & Technical
• Remote / Work-from-Home Opportunities

Job Overview

We are seeking an experienced Application Security Engineer (AppSec Engineer) to join a technology team in Qatar. The position is suitable for cybersecurity professionals with 3–7+ years of experience in application security, vulnerability assessment, secure development, and DevSecOps.

The successful candidate will work across application security testing, VAPT, secure code review, API security, SAST, DAST, SCA, and CI/CD security integration. Strong knowledge of application security tools and modern technologies including cloud platforms and Kubernetes is required.

This is an 8-month contract with the possibility of extension, offering an opportunity to develop expertise in enterprise application security, DevSecOps, cloud security, and secure software development practices. Candidates with relevant professional certifications and a strong commitment to continuous training and professional development will be well suited to the role.

Key Responsibilities

• Perform application security assessments and vulnerability testing.
• Conduct VAPT activities across applications, APIs, and supporting infrastructure.
• Identify, assess, document, and help remediate application security vulnerabilities.
• Perform secure code reviews across supported programming languages.
• Implement and support SAST, DAST, and SCA security practices.
• Conduct API security assessments and testing.
• Use security testing tools such as Burp Suite and OWASP ZAP.
• Apply OWASP security principles and industry best practices.
• Integrate application security controls into CI/CD pipelines.
• Support DevSecOps initiatives and secure software development processes.
• Collaborate with software developers, DevOps teams, infrastructure teams, and other stakeholders.
• Assess cloud and Kubernetes environments from an application security perspective.
• Provide recommendations to improve application security posture and reduce security risks.
• Support vulnerability remediation and security validation activities.

Requirements & Qualifications

• Bachelor’s degree in Computer Science, Cybersecurity, Information Security, or a related field.
• 3–7+ years of relevant professional experience in application security or cybersecurity.
• Strong knowledge of OWASP security principles.
• Hands-on experience with VAPT.
• Proficiency with Burp Suite and OWASP ZAP.
• Experience with SAST, DAST, and SCA.
• Strong understanding of API Security and secure code review.
• Experience with DevSecOps and CI/CD security.
• Programming knowledge in one or more of Java, .NET, C#, or JavaScript.
• Understanding of cloud security concepts.
• Knowledge of Kubernetes security.
• Preferred certifications include OSCP, CEH, GWAPT, CSSLP, or CISSP.
• Strong analytical, communication, problem-solving, and collaboration skills.
• Candidate must currently be available in Qatar.
• Candidate must be available to join ASAP.

Salary, Benefits & Career Growth

Salary: QAR 9,000

Contract: 8 months, extendable.

The role provides opportunities for career growth and professional development in application security, DevSecOps, cloud security, Kubernetes security, vulnerability management, and secure software development.

Relevant cybersecurity certifications such as OSCP, CEH, GWAPT, CSSLP, or CISSP can further support professional development and career progression in application security and cybersecurity.