Senior Information Security Engineer

ELEVUS ‑ PEOPLE & BUSINESS RESULTS, LDA; Doha; On-site; QAR 400,000 - 600,000; Full time

Job summary

A leading technology firm in Doha is seeking a Senior Information Security Engineer to conduct penetration testing, assess network security, and integrate security into the software development lifecycle. The ideal candidate has over 4 years of experience, strong skills in security tools, and excellent communication abilities.

Qualifications

• 4+ years of experience in Information Security focusing on application and network penetration testing.
• Hands-on experience with penetration testing tools.
• Strong knowledge of mobile application security and API testing methodologies.

Responsibilities

• Conduct penetration testing on web applications, APIs, and mobile applications.
• Perform network penetration testing and vulnerability assessments.
• Integrate security practices into the software development lifecycle.

Skills

Penetration Testing

Network Security

Vulnerability Assessment

Secure SDLC

Mobile Application Security

API Testing

Tools

Burp Suite

OWASP ZAP

Metasploit

Nmap

Nessus

Job description

About the job Senior Information Security Engineer

Key Responsibilities:

Perform web application, API, and mobile application penetration testing using industry-leading methodologies (OWASP, PTES, etc.).

Conduct network penetration testing and infrastructure security assessments.

Execute Vulnerability Assessment and Penetration Testing (VAPT) engagements, document findings, and recommend remediations.

Integrate security into the Software Development Lifecycle (SDLC) and advise development teams on secure coding practices.

Develop, enhance, and maintain security testing frameworks and tools.

Review and validate security patches, mitigations, and fixes.

Stay updated on the latest attack techniques, exploits, and threat landscapes to enhance testing methodologies.

Collaborate with cross-functional teams to support security awareness and risk reduction efforts.

Required Skills & Qualifications:

46 years of experience in Information Security, with a focus on application and network penetration testing.

Hands-on experience with tools like Burp Suite, OWASP ZAP, Metasploit, Nmap, Nessus, and other manual testing tools.

Deep understanding of OWASP Top 10, SANS Top 25, and common exploitation techniques.

Experience in secure SDLC practices and working with development teams to resolve findings.

Strong knowledge of mobile application security (iOS and Android) and API testing methodologies.

Excellent report writing and communication skills for both technical and non-technical stakeholders.

Preferred Certifications (1 or more):

OSCP (Offensive Security Certified Professional)

OSWE (Offensive Security Web Expert)

eWPT / eWPTX (eLearnSecurity Web Application Penetration Tester)

PNPT (Practical Network Penetration Tester)