Application Security Specialist: Pen Tests & DevSecOps

malomatia

Doha

On-site

QAR 180,000 - 320,000

Full time

14 days+

Application generator

A complete application in a minute — tailored resume and cover letter, ready to send.

Get past ATS filters

Job summary

malomatia in Doha is seeking an Application Security Specialist to fortify clients' applications across their lifecycle. You will conduct penetration testing, security scanning, threat modelling, and secure code reviews, partnering with development, QA, and DevOps to embed security into CI/CD pipelines.

The role requires hands-on security expertise, strong analytical skills, and the ability to translate findings into practical fixes for developers.

Qualifications

Bachelor’s degree in CS, information security, or related field.
Minimum 3 years in application security, secure software development, or related roles.
Proficiency with Burp Suite and other security testing tools.
Experience embedding security in CI/CD pipelines.
Knowledge of OWASP Top 10, ASVS, MASVS guidelines.

Responsibilities

Penetration testing on web, mobile, APIs, and thick-client apps with detailed reports.
Automated security scanning using SAST, DAST, and SCA across code and configurations.
Threat modelling and secure code reviews.
DevSecOps integration to CI/CD pipelines with remediation guidance.
Develop and deliver secure coding training for development teams.
Create documentation on assessments, vulnerability management, and standards.