Infrastructure, Network & Security Engineer – Application Security & DevSecOps | Doha, Qatar

WorkWavez; Qatar; On-site; QAR 180,000 - 300,000; Full time

Job summary

WorkWavez in Doha, Qatar seeks an experienced Infrastructure, Network & Security Engineer with hands-on expertise in Application Security and DevSecOps. This role focuses on securing web, mobile, and API environments, applying OWASP Top 10, and integrating security throughout the SDLC.

The ideal candidate has 4–6 years of experience, knowledge of VAPT, SAST/DAST/SCA tools, and cloud security fundamentals. You will collaborate with development and infrastructure teams to reduce security risks and

Qualifications

• Bachelor’s degree in Computer Science, Cybersecurity, or a related field.
• 4–6 years of relevant professional experience.
• Strong knowledge of OWASP Top 10 and secure coding practices.
• Experience with Vulnerability Assessment and Penetration Testing (VAPT).
• Experience with SAST, DAST, and SCA tools.
• Experience implementing Secure SDLC and DevSecOps.
• CI/CD pipeline security experience.
• Threat modelling and risk assessment experience.
• Security vulnerability remediation experience.
• Cloud security fundamentals.

Responsibilities

• Support application security activities across web, mobile, and API environments.
• Identify and assess application security vulnerabilities.
• Apply OWASP Top 10 guidelines and secure coding practices.
• Conduct Vulnerability Assessment and Penetration Testing (VAPT).
• Perform security testing using SAST, DAST, and SCA tools.
• Integrate security practices into the Software Development Life Cycle.
• Support DevSecOps implementation and CI/CD pipeline security.
• Conduct threat modelling and security risk assessments.
• Identify security weaknesses and recommend remediation measures.
• Support cloud security assessments and follow security best practices.
• Work with development and infrastructure teams to improve application security.

Skills

Application security across web, móvil

OWASP Top 10

VAPT

SAST

DAST

SCA

Secure SDLC

DevSecOps

CI/CD security

Threat modelling

Risk assessment

Cloud security fundamentals

Education

Bachelor’s degree in Computer Science, Cybersecurity, or a related field

Tools

Job description

Location: Doha, Qatar

Job Category:

• Information Technology (IT) & Software
• Engineering & Technical
• Security & Defence
• Legal & Compliance

Job Overview

We are seeking an experienced Infrastructure, Network & Security Engineer with strong hands‑on expertise in Application Security and DevSecOps. The position is based in Doha, Qatar, and is suitable for security professionals with 4–6 years of relevant experience.

The successful candidate will work with application security across web applications, mobile applications, and APIs. Strong knowledge of OWASP Top 10, secure coding practices, Vulnerability Assessment and Penetration Testing (VAPT), and security testing methodologies is essential.

Candidates should also have practical experience with SAST, DAST, SCA, Secure Software Development Life Cycle (Secure SDLC), DevSecOps, and CI/CD security. Knowledge of threat modelling, risk assessment, remediation, and cloud security fundamentals will be important for supporting application security and reducing organizational security risks.

Key Responsibilities

• Support application security activities across web, mobile, and API environments.
• Identify and assess application security vulnerabilities.
• Apply OWASP Top 10 guidelines and secure coding practices.
• Conduct Vulnerability Assessment and Penetration Testing (VAPT).
• Perform security testing using SAST, DAST, and SCA tools.
• Integrate security practices into the Software Development Life Cycle.
• Support DevSecOps implementation and CI/CD pipeline security.
• Conduct threat modelling and security risk assessments.
• Identify security weaknesses and recommend appropriate remediation measures.
• Support cloud security assessments and follow security best practices.
• Work with development and infrastructure teams to improve application security.

Requirements & Qualifications

Education

– Bachelor’s degree in Computer Science, Cybersecurity, or a related field.

Experience

– 4–6 years of relevant professional experience.

Technical Skills

• Application security for web, mobile, and APIs.
• OWASP Top 10 and secure coding practices.
• Vulnerability Assessment and Penetration Testing (VAPT).
• SAST, DAST, and SCA tools.
• Secure SDLC implementation.
• DevSecOps practices.
• CI/CD pipeline security.
• Threat modelling and risk assessment.
• Security vulnerability remediation.
• Cloud security fundamentals.

Preferred Certifications

Candidates with any of the following certifications will be preferred:

• OSCP – Offensive Security Certified Professional.
• CEH – Certified Ethical Hacker.
• GWAPT – GIAC Web Application Penetration Tester.
• CSSLP – Certified Secure Software Lifecycle Professional.
• Security+ – CompTIA Security+.

Salary, Benefits & Career Growth

The employer has not specified salary or employee benefits in the original job description.

This opportunity offers exposure to application security, DevSecOps, vulnerability management, and modern cybersecurity practices.

Relevant professional development areas include:

• Advanced application security.
• Penetration testing and vulnerability assessment.
• DevSecOps and CI/CD security.
• Secure software development practices.
• Cloud security and risk management.
• Industry‑recognized cybersecurity certifications.

Specific salary, benefits, and training arrangements should be confirmed with the employer.