AppSec Engineer (TS/Node.js) — Secure SDLC & DevSecOps

Novel Corporation; Qatar; On-site; QAR 180,000 - 280,000; Full time

Job summary

Novel Corporation in Qatar is seeking a Security Developer to lead secure coding, threat modeling, and CI/CD security across web, mobile, and API environments. You will own application security reviews, implement strong encryption, PKI, and robust authentication, and drive secure release management in a on-site engagement.

You must have 4+ years of software development with security specialization, hands-on experience with SAST/DAST/SCA tools (Snyk, AppScan, Fortify, Burp Suite), and familiarity

Qualifications

• Bachelor’s degree in CS, SE, or related technical discipline.
• 4+ years of professional software development with at least 2 years in security.
• Experience in mobile, backend, or full-stack development with TS/Node/Java/Kotlin.
• Strong knowledge of OWASP Top 10, ASVS, MASVS, NIST SSDF.
• Proficient with Snyk, AppScan, Fortify, Burp Suite.
• Experience with API security, TLS, PKI and CI/CD pipelines.
• Ability to triage vulnerabilities and communicate with stakeholders.
• Willingness to work on-site in Qatar.

Responsibilities

• Design and develop secure software applications and microservices following industry-best security practices and secure coding guidelines.
• Conduct comprehensive threat modeling, architectural risk assessments, and security reviews for web, mobile, and API systems.
• Implement robust authentication, role-based authorization, end-to-end encryption, PKI, and secure data storage controls.
• Identify, analyze, and remediate software vulnerabilities through rigorous static/dynamic code analysis and developer code reviews.
• Integrate automated application security testing tools (SAST, DAST, SCA) into CI/CD build pipelines.
• Strengthen DevSecOps practices, software supply chain security, artifact signing, and secure release management processes.
• Develop automated security test suites and collaborate with development, DevOps, QA, and security teams.
• Promote secure coding awareness and best practices through internal developer training and runbooks.

Skills

4+ years software dev

Application security

TypeScript

Node.js

Java

Kotlin

PostgreSQL

OWASP ASVS

NIST SSDF

CI/CD security

SAST/DAST/SCA

DevSecOps

PKI/TLS

Code signing

Stakeholder comms

Education

Bachelors in CS/SE/IT

Tools

Snyk

HCL AppScan

Fortify

Burp Suite

Job description

Novel Corporation in Qatar is seeking a Security Developer to lead secure coding, threat modeling, and CI/CD security across web, mobile, and API environments. You will own application security reviews, implement strong encryption, PKI, and robust authentication, and drive secure release management in a on-site engagement.

You must have 4+ years of software development with security specialization, hands-on experience with SAST/DAST/SCA tools (Snyk, AppScan, Fortify, Burp Suite), and familiarity