Application Security Consultant

About the role

Malomatia is seeking an Application Security Consultant to strengthen the security posture of its web, mobile, API and thick‑client applications. You will work closely with development teams to identify, assess and remediate vulnerabilities throughout the software lifecycle.

Key responsibilities

• Conduct penetration testing on web, mobile, API and thick‑client applications and produce actionable remediation reports.
• Implement and manage automated SAST, DAST and SCA tools to continuously monitor code, configurations and dependencies.
• Perform threat modelling and provide guidance on risk mitigation.
• Review application code for security flaws and recommend fixes.
• Develop and deliver training sessions to raise application‑security awareness among developers.
• Evaluate and recommend security testing tools and technologies.
• Create and maintain documentation for security assessments, vulnerability management and security policies.

Required profile

• Bachelor’s degree in Computer Science, Information Security or a related field.
• At least 2 years of experience in application security, software development or a related discipline.
• Relevant certifications such as BCSP, OSWA, OSWE, eWPT, eWPTX or SEC542 are highly desirable.
• Strong understanding of secure coding practices and familiarity with at least one programming language.
• Knowledge of OWASP Top 10, ASVS, MASVS, WSTG and related security frameworks.
• Experience with DevSecOps practices and CI/CD pipelines is a plus.

Required skills

• Burp Suite (required)
• Fortify
• SonarQube
• Postman
• Secure coding practices

What we offer

• Opportunity to work on diverse application platforms in a leading Qatar‑based IT services firm.
• Collaborative environment with top local and international talent.
• Professional development and training in cutting‑edge security technologies.