Infrastructure, Network & Security Engineer – Application Security & DevSecOps
Listed on 2026-11-06
-
IT/Tech
Cybersecurity, Security Management & Operations, Information Security & Data Protection, Network Security
Location:
Doha, Qatar
Job Category:
- Information Technology (IT) & Software
- Engineering & Technical
- Security & Defence
- Legal & Compliance
We are seeking an experienced Infrastructure, Network & Security Engineer with strong hands‑on expertise in Application Security and Dev Sec Ops . The position is based in Doha, Qatar, and is suitable for security professionals with 4–6 years of relevant experience.
The successful candidate will work with application security across web applications, mobile applications, and APIs. Strong knowledge of OWASP Top 10, secure coding practices, Vulnerability Assessment and Penetration Testing (VAPT), and security testing methodologies is essential.
Candidates should also have practical experience with SAST, DAST, SCA, Secure Software Development Life Cycle (Secure SDLC), Dev Sec Ops , and CI/CD security. Knowledge of threat modelling, risk assessment, remediation, and cloud security fundamentals will be important for supporting application security and reducing organizational security risks.
Key Responsibilities- Support application security activities across web, mobile, and API environments.
- Identify and assess application security vulnerabilities.
- Apply OWASP Top 10 guidelines and secure coding practices.
- Conduct Vulnerability Assessment and Penetration Testing (VAPT).
- Perform security testing using SAST, DAST, and SCA tools.
- Integrate security practices into the Software Development Life Cycle.
- Support Dev Sec Ops implementation and CI/CD pipeline security.
- Conduct threat modelling and security risk assessments.
- Identify security weaknesses and recommend appropriate remediation measures.
- Support cloud security assessments and follow security best practices.
- Work with development and infrastructure teams to improve application security.
Education
– Bachelor’s degree in Computer Science, Cybersecurity, or a related field.
Experience
– 4–6 years of relevant professional experience.
Technical Skills
- Application security for web, mobile, and APIs.
- OWASP Top 10 and secure coding practices.
- Vulnerability Assessment and Penetration Testing (VAPT).
- SAST, DAST, and SCA tools.
- Secure SDLC implementation.
- Dev Sec Ops practices.
- CI/CD pipeline security.
- Threat modelling and risk assessment.
- Security vulnerability remediation.
- Cloud security fundamentals.
Preferred Certifications
Candidates with any of the following certifications will be preferred:
- OSCP – Offensive Security Certified Professional.
- CEH – Certified Ethical Hacker.
- GWAPT – GIAC Web Application Penetration Tester.
- CSSLP – Certified Secure Software Lifecycle Professional.
- Security+ – CompTIA Security+.
The employer has not specified salary or employee benefits in the original job description.
This opportunity offers exposure to application security, Dev Sec Ops , vulnerability management, and modern cybersecurity practices.
Relevant professional development areas include:
- Advanced application security.
- Penetration testing and vulnerability assessment.
- Dev Sec Ops and CI/CD security.
- Secure software development practices.
- Cloud security and risk management.
- Industry‑recognized cybersecurity certifications.
Specific salary, benefits, and training arrangements should be confirmed with the employer.
(If this job is in fact in your jurisdiction, then you may be using a Proxy or VPN to access this site, and to progress further, you should change your connectivity to another mobile device or PC).