Security Developer (TypeScript, Node.js & AppSec) | Novel Corporation | Qatar

Novel Corporation; Qatar; Presencial; QAR 180.000 - 280.000; Jornada completa

Descripción de la vacante

Novel Corporation in Qatar is seeking a Security Developer to lead secure coding, threat modeling, and CI/CD security across web, mobile, and API environments. You will own application security reviews, implement strong encryption, PKI, and robust authentication, and drive secure release management in a on-site engagement.

You must have 4+ years of software development with security specialization, hands-on experience with SAST/DAST/SCA tools (Snyk, AppScan, Fortify, Burp Suite), and familiarity

Formación

• Bachelor’s degree in CS, SE, or related technical discipline.
• 4+ years of professional software development with at least 2 years in security.
• Experience in mobile, backend, or full-stack development with TS/Node/Java/Kotlin.
• Strong knowledge of OWASP Top 10, ASVS, MASVS, NIST SSDF.
• Proficient with Snyk, AppScan, Fortify, Burp Suite.
• Experience with API security, TLS, PKI and CI/CD pipelines.
• Ability to triage vulnerabilities and communicate with stakeholders.
• Willingness to work on-site in Qatar.

Responsabilidades

• Design and develop secure software applications and microservices following industry-best security practices and secure coding guidelines.
• Conduct comprehensive threat modeling, architectural risk assessments, and security reviews for web, mobile, and API systems.
• Implement robust authentication, role-based authorization, end-to-end encryption, PKI, and secure data storage controls.
• Identify, analyze, and remediate software vulnerabilities through rigorous static/dynamic code analysis and developer code reviews.
• Integrate automated application security testing tools (SAST, DAST, SCA) into CI/CD build pipelines.
• Strengthen DevSecOps practices, software supply chain security, artifact signing, and secure release management processes.
• Develop automated security test suites and collaborate with development, DevOps, QA, and security teams.
• Promote secure coding awareness and best practices through internal developer training and runbooks.

Conocimientos

4+ years software dev

Application security

TypeScript

Node.js

Java

Kotlin

PostgreSQL

OWASP ASVS

NIST SSDF

CI/CD security

SAST/DAST/SCA

DevSecOps

PKI/TLS

Code signing

Stakeholder comms

Educación

Bachelors in CS/SE/IT

Herramientas

Snyk

HCL AppScan

Fortify

Burp Suite

Descripción del empleo

Position Summary:

Driving advanced application security engineering, secure software development lifecycle (SDLC) integration, and DevSecOps excellence in Qatar, Novel Corporation is actively seeking an accomplished Security Developer for a permanent professional engagement within their Cybersecurity Practice. In this vital technical role, you will take full operational, tactical, and technical ownership of threat modeling, secure coding standards, vulnerability remediation, and automated security testing across web, mobile, backend, and API environments. Bringing 4+ years of professional software development experience including dedicated application security expertise, you will empower global enterprise clients to achieve uncompromised software integrity, robust cryptographic controls, and resilient defense-in-depth architectures. This prestigious career opportunity offers competitive remuneration, extensive professional development, and career growth within a premier global IT consulting and managed services enterprise.

Detailed Job Description:

As a Security Developer supporting Novel Corporation on an on-site basis in Qatar, you will take full operational, tactical, and technical ownership of application security reviews, threat modeling, code analysis, and CI/CD security tool integration. Your day-to-day responsibilities include designing secure applications, implementing authentication, authorization, and encryption controls, identifying and remediating software vulnerabilities utilizing tools like Snyk, HCL AppScan, Fortify, and Burp Suite, integrating SAST, DAST, and SCA solutions into deployment pipelines, collaborating with development, DevOps, QA, and security squads, and interacting directly with talent acquisition specialists like Asma Banu.

Key Responsibilities:

• Design and develop secure software applications and microservices following industry-best security practices and secure coding guidelines.
• Conduct comprehensive threat modeling, architectural risk assessments, and security reviews for web, mobile, and API systems.
• Implement robust authentication, role-based authorization, end-to-end encryption, Public Key Infrastructure (PKI), and secure data storage controls.
• Identify, analyze, and remediate software vulnerabilities through rigorous static/dynamic code analysis and developer code reviews.
• Integrate automated application security testing tools (SAST, DAST, SCA) seamlessly into CI/CD build pipelines.
• Strengthen DevSecOps practices, software supply chain security, artifact signing, and secure release management processes.
• Develop automated security test suites and collaborate closely with development, DevOps, QA, and security engineering teams.
• Promote secure coding awareness and best practices through internal developer training, knowledge sharing sessions, and security runbooks.

Required Qualifications & Skills:

• Bachelor’s degree in Computer Science, Software Engineering, Cybersecurity, Information Technology, or related technical discipline.
• Minimum of 4+ years of professional software development experience, including at least 2 years in application security, product security, or security-sensitive development.
• Strong, demonstrable operational expertise in mobile, backend, or full-stack development utilizing TypeScript, Node.js, Java, Kotlin, or PostgreSQL.
• Comprehensive working knowledge and practical proficiency in OWASP Top 10, OWASP ASVS, OWASP MASVS, NIST SSDF, and secure software development frameworks.
• Deep practical experience utilizing industry-standard application security tools such as Snyk, HCL AppScan, Fortify, or Burp Suite.
• Solid practical grasp of API security, TLS, PKI, code signing, key management systems, and CI/CD security pipeline integration.
• Exceptional analytical problem-solving aptitude, vulnerability triage capabilities, and professional stakeholder communication skills.
• Mandatory legal work authorization and physical availability for on-site professional operations in Qatar.

Nice-to-Have Skills:

• Professional application security certifications such as OSWA, OSWE, eWPT, GWEB, or equivalent offensive security credentials.
• Specialized experience in Android security, managed-device applications, secure software distribution, and release signing protocols.
• Prior professional working experience in top-tier multinational cybersecurity firms, financial institutions, or enterprise technology consultants.
• Experience utilizing enterprise agile tracking platforms (Jira, Confluence) for vulnerability tracking and sprint task coordination.
• Active participation in application security communities, bug bounty programs, or open-source security tool development.

Application Information:

• Recruiter: Novel Corporation Recruitment Division
• Contact Name: Asma Banu (Talent Specialist)
• Email: [e-mail]
• Email Subject Line: Security Developer - Qatar
• Phone:
• Company Website: https://www.noveloverseas.com
• Salary/Rate: Market Competitive / Enterprise Cybersecurity Package
• Deadline: Open until filled (Urgent Qatar Security Developer Opening)
• Notice Period: Immediate to 30 Days Preferred
• Contract Duration: Permanent / Full-Time On-Site Engagement (Qatar)

Recruitment Pro Tip:

• When applying for this Security Developer position through Novel Corporation, ensure your resume explicitly highlights your AppSec tool proficiency (Snyk/Fortify/Burp Suite), TypeScript/Node.js backend development experience, and relevant security certifications (OSWE/GWEB).