Senior Application Security Architect (DevSecOps)

Employment; Doha; On-site; QAR 320,000 - 520,000; Full time

Job summary

Employment seeks an IT Application Security Specialist to design, implement and govern application security across enterprise systems. You will drive Dev Sec Ops, integrate security into SDLC, and establish secure architecture standards across cloud, on-premises and hybrid environments.

Key activities include threat modeling, secure design pattern enforcement, CI/CD security tooling, and collaboration with SOC for threat detection and incident response.

Qualifications

• Bachelor’s degree in computer science, cybersecurity, or related field.
• 8–12 years in cybersecurity with focus on application security and DevSecOps.

Responsibilities

• Develop and govern enterprise Application Security program and secure-by-design principles.
• Design and review secure architectures for applications, APIs, and microservices.
• Lead threat modeling activities and enforce secure design patterns (authn, encryption).
• Integrate security controls into CI/CD pipelines and manage SAST/DAST/SCA tools.
• Design secure cloud architectures (AWS/Azure) with IAM and Zero Trust principles.
• Coordinate vulnerability assessments, remediation, and security testing.
• Collaborate with SOC, support SIEM use case development and monitoring.
• Ensure compliance with PCI DSS, ISO 27001 and other standards; audits support.

Skills

OWASP Top 10

Threat Modeling

DevSecOps

Secure SDLC

Cloud Security

Kubernetes/OpenShift

SIEM

Vulnerability Management

Security Architecture

Secure Coding Practices

Education

Bachelor's degree in Computer Science/Cybersecurity/Software Engineering

Tools

SAST

DAST

SCA

Kubernetes/OpenShift

AWS

Azure

CI/CD Security Tools

Threat Modeling Tools

Job description

Employment seeks an IT Application Security Specialist to design, implement and govern application security across enterprise systems. You will drive Dev Sec Ops, integrate security into SDLC, and establish secure architecture standards across cloud, on-premises and hybrid environments.

Key activities include threat modeling, secure design pattern enforcement, CI/CD security tooling, and collaboration with SOC for threat detection and incident response.