Senior Application Security Engineer - DevSecOps & Cloud

Starlink Qatar; Doha; On-site; QAR 300,000 - 420,000; Full time

Job summary

Starlink Qatar seeks an experienced Application Security Expert to assess and strengthen the security of Telco products, applications and platforms, with a focus on threat modelling, penetration testing, DAST/SAST, secure code review and DevSecOps across enterprise and customer-facing systems.

You will lead hands-on testing across web, mobile and APIs, review third-party components, guide developers through secure SDLC, and integrate security gates into CI/CD pipelines using GitLab and Jenkins

Qualifications

• 10+ years in Application Security or Cybersecurity.
• Hands-on experience with DAST, SAST, and security testing.
• Strong telecom/Telco security background.
• Familiarity with OWASP Top 10, API Security and secure SDLC.

Responsibilities

• Conduct web, mobile and API security testing and validation.
• Perform threat modelling and security risk assessments.
• Review code and secure software development lifecycle.
• Integrate security controls into CI/CD pipelines (GitLab/Jenkins).
• Secure cloud environments and containerized architectures.

Skills

Application Security

Threat Modelling

Penetration Testing

DAST

SAST

Secure Code Review

DevSecOps

GitLab

Jenkins

Kubernetes

Terraform

Cloud Platforms

CVE Mgmt

Tools

Burp Suite

Metasploit

Kali Linux

SonarQube

Checkmarx

Fortify

Job description

Starlink Qatar seeks an experienced Application Security Expert to assess and strengthen the security of Telco products, applications and platforms, with a focus on threat modelling, penetration testing, DAST/SAST, secure code review and DevSecOps across enterprise and customer-facing systems.

You will lead hands-on testing across web, mobile and APIs, review third-party components, guide developers through secure SDLC, and integrate security gates into CI/CD pipelines using GitLab and Jenkins