Cyber Security Engineer

Vistas Global; Doha; On-site; QAR 240,000 - 360,000; Full time

Job summary

Vistas Global is seeking an experienced Cybersecurity Engineer & Consultant in Doha, Qatar, to lead Fortify-based security implementations and advisory services. You will configure Fortify SSC, integrate with CI/CD, and perform security testing across SDLC.

The role requires hands-on Fortify expertise, strong vulnerability management skills, and the ability to work with customers and cross-functional teams to improve security posture.

Qualifications

• 5+ years of experience in cybersecurity, application security, security engineering, or security consulting.
• Strong hands-on experience implementing and supporting Open Text Fortify solutions.
• Experience with Fortify SAST, SCA, SSC, and DAST/Web Inspect.
• Ability to integrate security tools into CI/CD and DevOps environments.
• Experience collaborating with development and DevOps teams to remediate vulnerabilities.

Responsibilities

• Implement, configure, and support Open Text Fortify application security solutions.
• Conduct application security assessments using Fortify SAST, SCA, DAST/Web Inspect.
• Configure and administer Fortify SSC.
• Integrate Fortify with enterprise development environments and CI/CD pipelines.
• Embed security testing throughout the SDLC as part of Dev Sec Ops.
• Analyze scan results, perform vulnerability triage, and guide remediation.

Skills

Open Text Fortify

Fortify SAST

Fortify SCA

Fortify SSC

Fortify DAST / Web Inspect

Application security testing

Vulnerability management

Dev Sec Ops

CI/CD integration

Security reporting

Cybersecurity consulting

Education

Bachelor’s degree or equivalent

Tools

Jenkins

GitLab CI/CD

Azure DevOps

GitHub Actions

DevOps tooling

Job description

Job Summary

We are looking for an experienced Cybersecurity Engineer & Consultant with strong hands‑on expertise in Open Text Fortify and application security. The role will be responsible for implementing, configuring, integrating, and supporting Fortify solutions across enterprise environments while providing cybersecurity consulting and professional‑services expertise. The ideal candidate will have strong experience in Fortify SAST, SCA, SSC, DAST/Web Inspect, application security testing, vulnerability management, and Dev Sec Ops, along with the ability to work directly with customers and cross‑functional technical teams.

Key Responsibilities

• Implement, configure, and support Open Text Fortify application security solutions.
• Conduct application security assessments using Fortify SAST, SCA, DAST/Web Inspect, and related technologies.
• Configure and administer Fortify Software Security Center (SSC).
• Integrate Fortify with enterprise development environments and CI/CD pipelines.
• Support Dev Sec Ops initiatives by embedding security testing throughout the SDLC.
• Configure Fortify scanning policies, security rules, application profiles, and security controls.
• Analyze scan results and perform vulnerability triage, validation, and false-positive analysis.
• Work with development teams to identify root causes and provide vulnerability remediation guidance.
• Monitor application security risks and prepare security reports and dashboards.
• Support Fortify upgrades, migrations, integrations, configuration changes, and troubleshooting.
• Design and implement application security solutions based on customer requirements.
• Conduct security assessments, technical workshops, demonstrations, and knowledge-transfer sessions.
• Develop HLD/LLD, implementation plans, configuration guides, and operational documentation.
• Collaborate with application development, Dev Ops, infrastructure, SOC, cybersecurity, and project teams.
• Provide technical consulting throughout implementation, testing, deployment, and post-production support.
• Identify opportunities to improve application security processes, automation, and Dev Sec Ops maturity.
• Ensure implemented solutions comply with organizational security standards and application-security best practices.

Required Technical Skills

• Open Text Fortify
• Fortify SAST
• Fortify SCA
• Fortify Software Security Center (SSC)
• Fortify DAST / Web Inspect
• Application Security Vulnerability Assessment & Management
• SAST / DAST / SCA
• Dev Sec Ops
• Secure SDLC
• Application Security Testing
• Vulnerability Triage & Remediation
• Security Risk Assessment
• Security Reporting
• Security Controls & Policies
• Cybersecurity Consulting
• Integration & Dev Ops Skills
• Jenkins
• Git Lab CI/CD
• Azure Dev Ops
• Git Hub Actions
• Git CI/CD pipeline security integration
• REST APIs
• Automation and scripting SDLC integration
• Dev Sec Ops toolchain integration
• Cybersecurity Skills
• Application security architecture
• Vulnerability management
• Secure coding principles
• OWASP Top 10
• Web application security
• API security
• Risk assessment and vulnerability prioritization
• Security remediation and mitigation
• Threat and security analysis
• Security testing methodologies
• Cybersecurity best practices
• Security governance and compliance awareness

Required Experience

• 5+ years of experience in cybersecurity, application security, security engineering, or security consulting.
• Strong hands‑on experience implementing and supporting Open Text Fortify solutions.
• Experience with Fortify SAST, SCA, SSC, and DAST/Web Inspect.
• Strong understanding of application security testing and vulnerability management.
• Experience integrating security tools into CI/CD and Dev Ops environments.
• Experience working with development and Dev Ops teams to remediate security vulnerabilities.
• Experience in enterprise application-security environments.
• Professional Services / Consulting experience is strongly preferred.
• Strong customer-facing, communication, presentation, and stakeholder-management skills.
• Ability to independently troubleshoot technical issues and provide security recommendations.

Preferred Certifications

• Open Text Fortify Certification Certified Ethical Hacker (CEH) OSCPCISSPCSSLPG IAC certifications Relevant Dev Sec Ops / Application Security certifications