Application Security Specialist - Pen Testing & Secure SDLC

Employment; Doha; On-site; QAR 180,000 - 300,000; Full time

Job summary

Employment in Doha, Qatar is seeking an Application Security Specialist to secure client applications across their lifecycle. You will conduct penetration testing, security scanning, threat modelling, and secure code reviews, embedding security throughout the software development process.

Collaborate with development, QA, and DevOps teams to integrate security into CI/CD pipelines and deliver actionable remediation guidance.

Qualifications

• Education: Bachelor’s / college degree in Computer Science, Information Security, or a related field.
• Experience: At least 3 years of experience in application security, secure software development, penetration testing, or a closely related field.
• Certifications: Relevant professional certifications are highly desirable (e.g., OSWA, OSWE, GWAPT, GCIA, etc.).

Responsibilities

• Penetration Testing: Conduct penetration tests on web applications, mobile apps, APIs, and thick-client apps with detailed reports and actionable remediation.
• Security Scanning: Implement, tune, and manage automated security scanning tools (SAST, DAST, SCA).
• Threat Modelling: Perform threat modelling to identify risks early in design.
• Secure Code Review: Review source code for vulnerabilities and provide remediation guidance.
• Dev Sec Ops Integration: Integrate security testing into CI/CD pipelines.
• Training & Awareness: Develop and deliver secure coding training sessions.

Skills

Secure coding

Penetration testing

Threat modelling

Vulnerability assessment

DevSecOps

Education

Bachelor’s degree in Computer Science

Tools

Burp Suite

Snyk

HCL AppScan

Fortify

Postman

CI/CD pipelines

Job description

Employment in Doha, Qatar is seeking an Application Security Specialist to secure client applications across their lifecycle. You will conduct penetration testing, security scanning, threat modelling, and secure code reviews, embedding security throughout the software development process.

Collaborate with development, QA, and DevOps teams to integrate security into CI/CD pipelines and deliver actionable remediation guidance.