Application Security Engineer (AppSec Engineer)

About the role

The Application Security Engineer will assess, identify, and remediate security vulnerabilities across web, mobile, and API applications. The role involves conducting security assessments, penetration testing, secure code reviews, threat modelling, and integrating security practices throughout the Software Development Lifecycle.

Key responsibilities

• Assess, identify, and remediate security vulnerabilities across web, mobile, and API applications.
• Conduct security assessments, penetration testing, secure code reviews, threat modelling, and vulnerability management.
• Perform black‑box, grey‑box, and source‑code security reviews and VAPT activities.
• Execute static (SAST), dynamic (DAST) and software composition analysis (SCA) testing.
• Review authentication, authorization, session management, and access control mechanisms, including API security controls.

Required profile

• 3–7 years of experience in application security.
• On‑site work in Doha, Qatar, 5 days per week, with an 8‑month contract.

Required skills

• Application Security (AppSec)
• OWASP Top 10
• VAPT / Penetration Testing
• Secure Code Review
• API Security
• SAST, DAST, SCA
• Threat Modelling
• Secure SDLC / DevSecOps
• Burp Suite, OWASP ZAP, Checkmarx, Fortify, Veracode

What we offer

• Health Insurance
• Leaves
• Life Insurance