2 months ago
Doha, QatarMid Level
Responsibilities
- Conduct penetration tests across web, mobile, API, and thick-client applications and produce risk-rated reports with actionable remediation recommendations.
- Implement, tune, and manage SAST, DAST, and SCA security scanning tools across applications, code, configurations, and third-party dependencies.
- Perform threat modeling and provide guidance on mitigating application attack surfaces and security risks.
- Review source code for security vulnerabilities and provide developer-friendly remediation recommendations.
- Integrate security testing and controls into CI/CD pipelines for continuous security validation.
- Deliver secure coding training and application security awareness workshops.
- Evaluate application security testing and monitoring tools and recommend suitable technologies.
- Maintain documentation for security assessments, vulnerability management, application security standards, and policies.
Requirements
- Bachelor’s or college degree in computer science, information security, or a related field.
- At least 3 years of experience in application security, secure software development, penetration testing, or a closely related field.
- Proficiency with Burp Suite is required.
- Strong understanding of secure coding practices and hands-on experience with at least one programming language.
- Relevant professional certifications are highly desirable, including OffSec OSWA or OSWE, eLearnSecurity eWPT or eWPTX, GIAC/SANS SEC542 or GWAPT, BCSP, or other application security certifications.
- Familiarity with Snyk, HCL AppScan, Fortify, Postman, DevSecOps practices, and CI/CD pipelines is preferred.
- Knowledge of application security principles, common vulnerability classes, exploitation techniques, remediation strategies, and frameworks including OWASP Top 10, ASVS, MASVS, WSTG, and MSTG.
- Knowledge of Qatar National Information Assurance is a plus.
Tech Stack
Postman
Categories
About Malomatia
Malomatia is a Doha-based IT services and systems integration firm that delivers consulting, managed services, contact center operations, and enterprise solutions in cybersecurity, cloud, and AI for government and regulated industries in Qatar. The company builds and operates mission-critical platforms, including Oracle and other cloud environments, and provides SLA-driven support. Founded in 2008, it focuses on national digital programs and large public-sector modernization initiatives.