15 hours ago
Doha, QatarMid Level
Responsibilities
- Conduct penetration tests on web, mobile, API, and thick-client applications.
- Implement, tune, and manage SAST, DAST, and SCA security scanning tools.
- Perform threat modeling and assess application attack surfaces and risks.
- Conduct secure code reviews and provide developer-friendly remediation recommendations.
- Integrate security testing and controls into CI/CD pipelines.
- Triage and validate findings and provide actionable risk ratings and remediation guidance.
- Develop and deliver secure-coding training and security-awareness workshops.
- Evaluate application security tools and technologies.
- Create and maintain documentation for security assessments, vulnerability management, standards, and policies.
Requirements
- Bachelor’s or college degree in Computer Science, Information Security, or a related field.
- At least 3 years of experience in application security, secure software development, penetration testing, or a closely related field.
- Proficiency with Burp Suite is required.
- Familiarity with Snyk, HCL AppScan, Fortify, and Postman is preferred.
- Hands-on experience with at least one programming language and a strong understanding of secure coding practices.
- Familiarity with DevSecOps practices and CI/CD pipelines.
- In-depth knowledge of application security principles, common vulnerability classes, exploitation techniques, remediation strategies, and security frameworks including OWASP Top 10, ASVS, MASVS, WSTG, and MSTG.
- Relevant professional certifications are highly desirable, including OffSec, eLearnSecurity, GIAC/SANS, BCSP, or other application security certifications.
- Knowledge of Qatar National Information Assurance is a plus.
Tech Stack
Postman
Categories
About Malomatia
Malomatia is a Doha-based IT services and systems integration firm that delivers consulting, managed services, contact center operations, and enterprise solutions in cybersecurity, cloud, and AI for government and regulated industries in Qatar. The company builds and operates mission-critical platforms, including Oracle and other cloud environments, and provides SLA-driven support. Founded in 2008, it focuses on national digital programs and large public-sector modernization initiatives.