DevSecOps & Application Security Engineer

WorkWavez; Qatar; On-site; QAR 180,000 - 300,000; Full time

Job summary

WorkWavez in Doha, Qatar seeks an experienced Infrastructure, Network & Security Engineer with hands-on expertise in Application Security and DevSecOps. This role focuses on securing web, mobile, and API environments, applying OWASP Top 10, and integrating security throughout the SDLC.

The ideal candidate has 4–6 years of experience, knowledge of VAPT, SAST/DAST/SCA tools, and cloud security fundamentals. You will collaborate with development and infrastructure teams to reduce security risks and

Qualifications

• Bachelor’s degree in Computer Science, Cybersecurity, or a related field.
• 4–6 years of relevant professional experience.
• Strong knowledge of OWASP Top 10 and secure coding practices.
• Experience with Vulnerability Assessment and Penetration Testing (VAPT).
• Experience with SAST, DAST, and SCA tools.
• Experience implementing Secure SDLC and DevSecOps.
• CI/CD pipeline security experience.
• Threat modelling and risk assessment experience.
• Security vulnerability remediation experience.
• Cloud security fundamentals.

Responsibilities

• Support application security activities across web, mobile, and API environments.
• Identify and assess application security vulnerabilities.
• Apply OWASP Top 10 guidelines and secure coding practices.
• Conduct Vulnerability Assessment and Penetration Testing (VAPT).
• Perform security testing using SAST, DAST, and SCA tools.
• Integrate security practices into the Software Development Life Cycle.
• Support DevSecOps implementation and CI/CD pipeline security.
• Conduct threat modelling and security risk assessments.
• Identify security weaknesses and recommend remediation measures.
• Support cloud security assessments and follow security best practices.
• Work with development and infrastructure teams to improve application security.

Skills

Application security across web, móvil

OWASP Top 10

VAPT

SAST

DAST

SCA

Secure SDLC

DevSecOps

CI/CD security

Threat modelling

Risk assessment

Cloud security fundamentals

Education

Bachelor’s degree in Computer Science, Cybersecurity, or a related field

Tools

Job description

WorkWavez in Doha, Qatar seeks an experienced Infrastructure, Network & Security Engineer with hands-on expertise in Application Security and DevSecOps. This role focuses on securing web, mobile, and API environments, applying OWASP Top 10, and integrating security throughout the SDLC.

The ideal candidate has 4–6 years of experience, knowledge of VAPT, SAST/DAST/SCA tools, and cloud security fundamentals. You will collaborate with development and infrastructure teams to reduce security risks and