Security Consultant – AppSec & Penetration Testing.
Role Overview
Senior Security Consultant role focused on application security and penetration testing.
The position is full-time and onsite in Doha, Qatar; minimum five years of relevant experience is required.
Key Skills for This Role
Full Job Posting
Role overview
Senior Security Consultant role focused on application security and penetration testing.
The position is full-time and onsite in Doha, Qatar; minimum five years of relevant experience is required.
Responsibilities
- Assess and penetration-test web applications, APIs, Android applications, and iOS applications manually and with automated tools.
- Identify vulnerabilities, validate findings, and recommend remediation.
- Administer and configure Veracode for SAST, DAST, and Software Composition Analysis.
- Integrate automated security testing into CI/CD and implement Secure SDLC and DevSecOps practices.
- Test API security across REST, SOAP, OAuth 2.0, OpenID Connect, and JWT; apply OWASP methods and secure design practices.
- Prepare detailed assessment reports, collaborate with development teams, and support ongoing application security improvements.
Required experience and skills
- Minimum five years of relevant experience.
- Hands-on application security assessment and penetration testing of web applications, APIs, Android, and iOS.
- SAST, DAST, and SCA experience, including Veracode administration and configuration.
- Secure SDLC, DevSecOps, and CI/CD security-testing experience; GitHub Enterprise and GitHub Actions or equivalent technologies.
- API security testing covering REST, SOAP, OAuth 2.0, OpenID Connect, and JWT.
- Knowledge of OWASP Top 10, ASVS, WSTG, API Security Top 10, and MASVS/MSTG.
- Secure coding, application threat modeling, security-by-design, and Burp Suite Professional or equivalent tools.
Preferred certifications
- Preferred certifications include OSCP, OSWE, GWAPT, CSSLP, Burp Suite Certified Practitioner, Veracode certification, or equivalent.
- CISSP, CISM, and GSEC are additional advantages.
Apply for this job in 1 click
Skip the repetitive application forms
Install the Base Career Chrome Extension and autofill job applications across major job boards with your profile.
Trusted by over 500,000 job seekers on Base Career
More from this employer
More jobs at Paramount Computer Systems
Security Engineer - GRC/ISMS - ISR
, UAE
The employer is seeking an experienced Security Engineer to manage information security governance, risk, and compliance, including ISMS improvement, vendor assessments, audits, and incident governance. The role requires
Sales Executive (Saudi Nationals)
Riyadh, KSA
Paramount Computer Systems is seeking an early-career Sales Executive to generate leads, build client relationships, and support sales proposals and follow-ups. The role requires fluency in English and 0–1 year of sales
Senior Consultant – Information Security (ISR - DESC)
, UAE
The employer seeks a senior information security consultant to lead governance, ISMS, risk, compliance, vendor assurance, audits, and security advisory work. Candidates need 10+ years of experience, including 6+ years in
Security Engineer - GRC/ISMS
, UAE
The employer is seeking a senior security GRC/ISMS specialist to maintain its information security management system, manage risk, support audits, and advise on project and vendor security. Candidates need a relevant deg
Senior Consultant – Information Security (GRC
, UAE
The employer seeks a senior information security GRC consultant to lead ISMS, risk, compliance, vendor assurance, audits, and security advisory work. Candidates need 10+ years of overall experience, including 6+ years in
Forti-SOAR Administrator
, UAE
The employer is seeking a FortiSOAR Administrator to manage and optimize a customer’s SIEM/SOAR environment and support SOC operations. The role requires hands-on FortiSOAR and IBM QRadar expertise, along with SIEM/SOAR
Senior Security Engineer (NCA, DLP, Network Security)
Khobar, KSA
Paramount Computer Systems seeks an experienced Senior Security Architect to design, implement, and govern enterprise security architectures. The role requires strong expertise in NCA ECC compliance, Data Loss Prevention
Project Manager – Enterprise GRC Solution Implementation
Riyadh, KSA
The employer is seeking a Project Manager to deliver enterprise GRC platform implementations and connect business stakeholders with technical teams. Candidates need 8+ years of overall experience, hands-on experience wit
Security Engineer - GRC/ISMS - ISR
, UAE
Sales Executive (Saudi Nationals)
Riyadh, KSA
Senior Consultant – Information Security (ISR - DESC)
, UAE
Security Engineer - GRC/ISMS
, UAE
Senior Consultant – Information Security (GRC
, UAE
Forti-SOAR Administrator
, UAE
Senior Security Engineer (NCA, DLP, Network Security)
Khobar, KSA
Project Manager – Enterprise GRC Solution Implementation
Riyadh, KSA