Secure Software Engineer - App Security & DevSecOps

Maseera; Doha; On-site; QAR 328,000 - 473,000; Full time

Job summary

Maseera is hiring a Security Developer to design and build secure applications across web, mobile, backend, and API environments. You will embed security into every phase of development, from design to deployment, and work closely with DevOps, QA, and security teams.

Responsibilities include threat modelling, secure architecture reviews, implementing authentication and encryption controls, and integrating SAST/DAST/SCAs into CI/CD pipelines to strengthen our software supply chain.

Qualifications

• Bachelor's degree or equivalent in CS/SE/Cybersecurity.
• 4+ years of software development experience.
• At least 2 years in application security or product security.
• Experience with mobile, backend, or full-stack development.
• Knowledge of OWASP standards and secure software development practices.
• Experience with security tools like Snyk, AppScan, Fortify, Burp.

Responsibilities

• Design and develop secure applications.
• Conduct threat modelling and security architecture reviews.
• Implement authentication, authorization, encryption, PKI, and secure storage controls.
• Identify and remediate vulnerabilities through secure coding and code reviews.
• Integrate SAST, DAST, and SCA tools into CI/CD pipelines.
• Strengthen DevSecOps and software supply chain security.
• Develop automated security tests.
• Collaborate with development, DevOps, QA, and security teams.
• Promote secure coding practices through training and knowledge sharing.

Skills

Software development

Application security

Full-stack development

Threat modelling

Education

Bachelor's degree or equivalent in CS/SE/Cybersecurity

Tools

Snyk

HCL AppScan

Fortify

Burp Suite

Job description

Maseera is hiring a Security Developer to design and build secure applications across web, mobile, backend, and API environments. You will embed security into every phase of development, from design to deployment, and work closely with DevOps, QA, and security teams.

Responsibilities include threat modelling, secure architecture reviews, implementing authentication and encryption controls, and integrating SAST/DAST/SCAs into CI/CD pipelines to strengthen our software supply chain.