Application Security Engineer

About the role

Cybward is looking for an experienced Application Security Engineer to join its on‑site team in Doha, Qatar. You will help build secure DevSecOps pipelines, assess software vulnerabilities, and embed security best practices throughout the software development lifecycle.

Key responsibilities

• Design, implement and maintain DevSecOps pipelines that integrate security tools into CI/CD workflows.
• Conduct secure code reviews, threat modeling, and penetration testing of web applications.
• Perform regular application security testing and vulnerability assessments.
• Document security findings and work with development teams to remediate issues.
• Stay current on emerging threats and contribute to the overall security strategy.

Required profile

• 5‑8 years of experience in application security, secure coding, and vulnerability mitigation.
• Strong understanding of web security standards such as OWASP Top 10.
• Experience with SDLC processes and integrating security into development workflows.
• Excellent analytical skills and ability to communicate technical findings to non‑technical stakeholders.
• Bachelor’s degree in Computer Science, Cybersecurity, IT or equivalent experience; relevant certifications are a plus.

Required skills

• Java, Python, C# programming languages.
• Secure code review, threat modeling, penetration testing tools.
• CI/CD pipeline integration and DevSecOps tooling.
• Knowledge of network security protocols, cryptographic principles, and data‑protection best practices.
• Familiarity with OWASP Top 10 and defensive programming techniques.