الملخص
تبحث شركة Malomatia عن استشاري أمن تطبيقات للعمل في الدوحة، قطر. تشمل المهام اختبار الاختراق لتطبيقات الويب والهواتف المحمولة وواجهات API وتطبيقات العميل السميكة، وإدارة فحوصات الأمن، ونمذجة التهديدات، ومراجعة الشيفرات وتوثيق الثغرات. كما يتولى شاغل الوظيفة تقييم أدوات الأمن وتقديم جلسات توعوية لفرق التطوير. يُشترط مؤهل جامعي مناسب وخبرة لا تقل عن سنتين، وإتقان Burp Suite ومعرفة بممارسات البرمجة الآمنة، وتُعد الشهادات المهنية ذات الصلة ميزة مرغوبة.
نص الإعلان
كما نُشر على malomatia.com. نقلناه من موقع صاحب العمل كما كتبه.
Responsibilities
- Penetration Testing: Conduct penetration tests on web applications, mobile applications, APIs, and thick client applications. Prepare detailed reports with actionable recommendations for remediation.
- Security Scanning: Implement and manage automated security scanning tools (SAST, DAST, SCA) to continuously monitor and identify vulnerabilities in code, configurations, and dependencies across all application types.
- Threat Modelling: Perform threat modelling to identify potential security risks associated with various types of applications. Provide guidance on mitigating these risks.
- Code Review: Review application code for security vulnerabilities across multiple platforms and offer practical recommendations for remediation.
- Training & Awareness: Develop and deliver training sessions and workshops to raise awareness about application security among development teams and other stakeholders, tailored to different application types.
- Tool Evaluation: Assess and recommend tools and technologies to enhance application security testing and monitoring capabilities across various platforms.
- Documentation: Create and maintain comprehensive documentation related to security assessments, vulnerability management, and security policies for diverse application types.
Qualifications
- Education: Bachelor’s / college degree in Computer Science, Information Security, or a related field.
- Experience: At least 2 years of experience in application security, software development, or a related field.
- Certifications: Relevant certifications (e.g., BCSP, OSWA, OSWE, eWPT, eWPTX, SEC542) are highly desirable.
- Technical Skills: Proficiency with security testing tools such as Burp Suite (required), Fortify, SonarQube, and Postman (preferred). Strong understanding of secure coding practices and experience with at least one programming language.
- Knowledge: In-depth knowledge of application security principles and practices, familiar with security frameworks and guidelines (e.g., OWASP Top 10, ASVS, MASVS, WSTG, MSTG). Familiarity with DevSecOps practices and CI/CD pipelines is a plus.