Senior Information Security Engineer

Bounty Hunter World; Doha; On-site; QAR 400,000 - 600,000; Full time

Job summary

A leading aerospace and defense firm in Doha, Qatar is seeking a Senior Information Security Engineer. The role involves ensuring applications and data are secured according to best practices, conducting penetration tests, and supporting secure software development lifecycles. Candidates must have 5–8 years of experience in information security, with a strong focus on application security, network and mobile application testing, and relevant certifications like OSCP and OSWE.

Qualifications

• 5–8 years of proven experience in information security roles.
• Strong background in application security, secure coding practices.
• Proficiency in VAPT methodologies and tools.

Responsibilities

• Perform scheduled penetration testing of applications.
• Conduct security vulnerability assessments on electronic assets.
• Support JVs and Subsidiaries in implementing a Secure Software development lifecycle.

Skills

Application security expertise

Web application penetration testing

Network penetration testing

Vulnerability assessment and penetration testing (VAPT)

Mobile application and API penetration testing

Job description

Overview

mselect is looking to hire a Senior Information Security Engineer for an Aerospace & Defence manufacturing client in Doha, Qatar. Candidates must have a minimum of 5-8 years of proven experience in information security roles. Fluency in English is a must.

Job Purpose

The Information Security Engineer will focus on ensuring applications and data are secure and built according to best security standards. This role will be the subject matter expert on creating secure code, application security, Vulnerability testing, and providing security validation to internal environments.

Key Responsibilities

• Perform scheduled penetration testing of applications
• Perform white, grey and black box security assessments
• Support JVs and Subsidiaries in implementing a Secure Software development lifecycle
• Perform Mobile Services security Assessments
• Support environment monitoring using available tools or help build internal tools to enable advanced threat detection and response
• Conduct Security Vulnerability Assessments and impact assessment on electronic assets
• Perform Security Assessments on ERP and other on-premise solutions

Requirements

• 5–8 years of proven experience in information security roles
• Strong background in application security with hands-on involvement in secure coding practices and threat modelling
• Expertise in web application penetration testing, including OWASP Top 10 vulnerabilities
• Experience in network penetration testing covering internal, external, and wireless assessments
• Skilled in mobile application and API penetration testing, identifying risks and securing integrations
• Proficiency in Vulnerability Assessment and Penetration Testing (VAPT) methodologies and tools
• Solid understanding of Secure Development Lifecycle (SDLC), including security controls integration across all phases

Required Certifications

• OSCP – Mandatory
• OSWE – Mandatory
• API Security – Mandatory
• SAST – Mandatory
• DAST – Mandatory
• Application Security (APPSEC) –
• Secure SDLC (SSDLC) –

*Only applicants meeting the strict criteria outlined above will be contacted as part of the shortlisting process.

BH-MS1001

Bounty Hunter World