Summary
Malomatia is seeking an Application Security Consultant in Doha, Qatar. The role involves penetration testing across web, mobile, API and thick client applications, managing security scanning, threat modelling, code reviews and vulnerability documentation. The consultant will also recommend security tools and deliver awareness sessions to development teams. Applicants need a relevant bachelor’s or college degree, at least 2 years of related experience, proficiency with Burp Suite, and knowledge of secure coding; relevant certifications are highly desirable.
The posting
As published on malomatia.com. Pulled from the employer's site and shown as they wrote it.
Responsibilities
- Penetration Testing: Conduct penetration tests on web applications, mobile applications, APIs, and thick client applications. Prepare detailed reports with actionable recommendations for remediation.
- Security Scanning: Implement and manage automated security scanning tools (SAST, DAST, SCA) to continuously monitor and identify vulnerabilities in code, configurations, and dependencies across all application types.
- Threat Modelling: Perform threat modelling to identify potential security risks associated with various types of applications. Provide guidance on mitigating these risks.
- Code Review: Review application code for security vulnerabilities across multiple platforms and offer practical recommendations for remediation.
- Training & Awareness: Develop and deliver training sessions and workshops to raise awareness about application security among development teams and other stakeholders, tailored to different application types.
- Tool Evaluation: Assess and recommend tools and technologies to enhance application security testing and monitoring capabilities across various platforms.
- Documentation: Create and maintain comprehensive documentation related to security assessments, vulnerability management, and security policies for diverse application types.
Qualifications
- Education: Bachelor’s / college degree in Computer Science, Information Security, or a related field.
- Experience: At least 2 years of experience in application security, software development, or a related field.
- Certifications: Relevant certifications (e.g., BCSP, OSWA, OSWE, eWPT, eWPTX, SEC542) are highly desirable.
- Technical Skills: Proficiency with security testing tools such as Burp Suite (required), Fortify, SonarQube, and Postman (preferred). Strong understanding of secure coding practices and experience with at least one programming language.
- Knowledge: In-depth knowledge of application security principles and practices, familiar with security frameworks and guidelines (e.g., OWASP Top 10, ASVS, MASVS, WSTG, MSTG). Familiarity with DevSecOps practices and CI/CD pipelines is a plus.