Application Security Lead
Full Job Posting
Qualifications
- Education: Bachelor’s / college degree in Computer Science, Information Security, or a related field.
- Experience: At least 3 years of experience in application security, secure software development, penetration testing, or a closely related field.
- Certifications: Relevant professional certifications are highly desirable. These may include, but are not limited to:
- OffSec certifications (e.g., OSWA, OSWE)
- eLearnSecurity (e.g., eWPT, eWPTX)
- GIAC / SANS (e.g., SEC542, GWAPT)
- BCSP or other application security certifications.
- Technical Skills: Proficiency with security testing tools such as Burp Suite (required), and familiarity with Snyk, HCL AppScan, Fority, and Postman (preferred). Strong understanding of secure coding practices and hands-on experience with at least one programming language. Familiarity with DevSecOps practices and CI/CD pipelines is preferred.
- Knowledge: In-depth knowledge of application security principles and practices, with strong familiarity with security frameworks and guidelines (e.g., OWASP Top 10, ASVS, MASVS, WSTG, MSTG). Understanding of common vulnerability classes, exploitation techniques, and remediation strategies. Knowledge of Qatar National Information Assurance (NIA) is a plus.
- Certifications: Relevant professional certifications are highly desirable. These may include, but are not limited to: OffSec certifications (e.g., OSWA, OSWE) eLearnSecurity (e.g., eWPT, eWPTX) GIAC / SANS (e.g., SEC542, GWAPT) BCSP or other application security certifications.
Responsibilities
- Penetration Testing: Conduct penetration tests on web applications, mobile applications, APIs, and thick-client applications. Prepare detailed reports with clear risk ratings and actionable remediation recommendations.
- Security Scanning: Implement, tune, and manage automated security scanning tools (SAST, DAST, SCA) to continuously identify vulnerabilities in code, configurations, and third-party dependencies across all application types.
- Threat Modelling: Perform threat modelling to identify potential security risks and attack surfaces associated with applications early in the design process and provide guidance on mitigating these risks.
- Secure Code Review: Review application source code for security vulnerabilities across multiple platforms and languages, and offer practical, developer-friendly recommendations for remediation.
- DevSecOps Integration: Integrate security testing and controls into CI/CD pipelines, enabling continuous and automated security validation as part of the development workflow.
- Training & Awareness: Develop and deliver secure coding training sessions and workshops to raise application security awareness among development teams and other stakeholders.
- Tool Evaluation: Assess and recommend tools and technologies to enhance application security testing and monitoring capabilities across various platforms.
- Documentation: Create and maintain comprehensive documentation related to security assessments, vulnerability management, and application security standards and policies.
Apply for this job in 1 click
Skip the repetitive application forms
Install the Base Career Chrome Extension and autofill job applications across major job boards with your profile.
Trusted by over 500,000 job seekers on Base Career
More from this employer
More jobs at Malomatia
Executive Assistant
, QAT
Executive Assistant is responsible for providing secretarial and administrative support to Chief of SBU. The role holder must understand business priorities, demonstrate the ability to proactively anticipate needs and dr
Engineer – System
, QAT
Seeking a Senior Systems Engineer with 8+ years of experience in Linux and Windows administration, virtualization, and enterprise infrastructure management. The role involves managing VMware, Nutanix, VxRail, Zabbix Moni
Consultant – Assurance & Validation, GPU Infrastructure
, QAT
Provide independent technical assurance and validation of GPU implementation and ongoing operations. Serve as the client’s technical conscience to ensure quality, performance, and readiness of the delivered GPU platform.
Data Migration Lead
, QAT
The role requires strong migration leadership and preferably Siebel migration experience. Qualifications Proven experience leading complex, multi-entity data migration programs. Strong hands-on understanding of data prof
Azure API Management (APIM) Developer
, QAT
To own the API gateway layer that connects internal services, government entities, and external consumers. The work covers policy development, security, lifecycle automation, and developer onboarding. Qualifications Bach
Data and AI Specialist
, QAT
Deep technical expertise in data engineering, machine learning, and cloud AI services with strong governance and policy awareness, ensuring scalable, secure, and ethical use of AI in alignment with organizational goals.
Consultant – Operations Oversight & Performance, AI Infrastructure
, QAT
The Consultant – Operations Oversight & Performance, AI Infrastructure is responsible for Oversee OEM ongoing operational delivery after go-live. Ensure the GPU infrastructure AI Runtime Layer - Kubernetes, GPU schedulin
Camunda BPM Integration Support
, QAT
We are looking for an Engineer - Camunda BPM Developer to model, develop, test, deploy, administer, and support Camunda BPM workflows for entity onboarding and payment processing in a Kubernetes / OKE environment. • Mode
Executive Assistant
, QAT
Engineer – System
, QAT
Consultant – Assurance & Validation, GPU Infrastructure
, QAT
Data Migration Lead
, QAT
Azure API Management (APIM) Developer
, QAT
Data and AI Specialist
, QAT
Consultant – Operations Oversight & Performance, AI Infrastructure
, QAT
Camunda BPM Integration Support
, QAT