AppSec Engineer - Remote | Cloud, DevSecOps & API Security

Zeroonesolutions; Qatar; On-site; QAR 91,000 - 109,000; Full time

Job summary

Zeroonesolutions in Qatar is seeking an experienced Application Security Engineer to join our technology team. The role focuses on application security testing, vulnerability assessment, secure development, and DevSecOps across apps, APIs, and CI/CD pipelines.

The ideal candidate has 3–7+ years in app security, with hands-on expertise in Burp Suite, OWASP ZAP, SAST/DAST/SCA, and cloud/Kubernetes security. This 8-month contract offers growth in enterprise security and training opportunities.

Qualifications

• 3–7+ years of relevant professional experience in application security or cybersecurity.
• Strong knowledge of OWASP security principles.
• Hands-on experience with VAPT.
• Proficiency with Burp Suite and OWASP ZAP.
• Experience with SAST, DAST, and SCA.
• Strong understanding of API Security and secure code review.
• Experience with DevSecOps and CI/CD security.
• Programming knowledge in Java, .NET, C#, or JavaScript.
• Understanding of cloud security concepts.
• Knowledge of Kubernetes security.
• Preferred certifications include OSCP, CEH, GWAPT, CSSLP, or CISSP.

Responsibilities

• Perform application security assessments and vulnerability testing.
• Conduct VAPT across applications, APIs, and supporting infrastructure.
• Identify, assess, document, and help remediate application security vulnerabilities.
• Perform secure code reviews across supported programming languages.
• Implement and support SAST, DAST, and SCA security practices.
• Conduct API security assessments and testing.
• Use security testing tools such as Burp Suite and OWASP ZAP.
• Apply OWASP security principles and industry best practices.
• Integrate application security controls into CI/CD pipelines.
• Support DevSecOps initiatives and secure software development processes.
• Collaborate with software developers, DevOps teams, infrastructure teams, and other stakeholders.
• Assess cloud and Kubernetes environments from an application security perspective.
• Provide recommendations to improve application security posture and reduce security risks.
• Support vulnerability remediation and security validation activities.

Skills

VAPT

CI/CD security

Cloud security

API security

DevSecOps

Education

Bachelor's degree in Computer Science, Cybersecurity, Information Security

Tools

Burp Suite

OWASP ZAP

SAST

DAST

SCA

Job description

Zeroonesolutions in Qatar is seeking an experienced Application Security Engineer to join our technology team. The role focuses on application security testing, vulnerability assessment, secure development, and DevSecOps across apps, APIs, and CI/CD pipelines.

The ideal candidate has 3–7+ years in app security, with hands-on expertise in Burp Suite, OWASP ZAP, SAST/DAST/SCA, and cloud/Kubernetes security. This 8-month contract offers growth in enterprise security and training opportunities.