Application Security Specialist

About the role

We are looking for an Application Security Specialist to protect our web, mobile, API and thick‑client applications throughout their entire lifecycle. You will partner with development, DevOps and QA teams to embed security into design, coding and deployment processes.

Key responsibilities

• Perform penetration testing on web, mobile, API and thick‑client applications.
• Run automated security scans (SAST, DAST, SCA) to uncover code, configuration and dependency vulnerabilities.
• Conduct threat modelling during design phases and define mitigation strategies.
• Execute secure code reviews and provide developer‑friendly remediation guidance.
• Integrate security controls into CI/CD pipelines to enable DevSecOps practices.
• Develop and deliver secure‑coding training and awareness sessions for development teams.
• Evaluate, recommend and maintain application security tools and technologies.
• Document security assessments, vulnerability findings and application security standards.

Required profile

• Minimum 3 years of experience in application security, secure software development or penetration testing.
• Bachelor’s degree in Computer Science, Information Security or a related field.
• Preferred certifications such as OSWA, OSWE, eWPT, eWPTX, SEC542 or GWAPT.
• Knowledge of the Qatar National Information Assurance (NIA) framework is a plus.

Required skills

• Hands‑on experience with Burp Suite (required).
• Familiarity with Snyk, HCL AppScan, Fortify and Postman.
• Strong understanding of OWASP Top 10, ASVS, MASVS, WSTG and MSTG.
• Proficiency in at least one programming language and secure coding practices.
• Experience integrating security into CI/CD pipelines and DevSecOps environments.
• Ability to perform threat modelling, secure code reviews and penetration testing.