Application Security Engineer

Company Description

Cybward is a groundbreaking marketplace uniting top-tier cybersecurity talent, specialized vendors, and enterprises seeking high-quality security solutions. Leveraging AI-powered matching and robust verification, Cybward ensures transparency, efficiency, and bias-free collaboration. Its secure platform supports clients, partners, and independent consultants in achieving their cybersecurity goals, ranging from SOC 2 audits to Red Team engagements. Dedicated to bridging gaps in the cybersecurity ecosystem, Cybward provides escrow-backed transactions and access to premium opportunities while ensuring total anonymity and data protection. Headquartered at the forefront of innovation, Cybward is committed to shaping a secure and digital future.

Role Description

This is a full-time role for an Application Security Engineer based on-site in Doha, Qatar. 5-8 years minimum experience required.

The Application Security Engineer will be responsible for building DevSecOps pipelines and assessing and mitigating security vulnerabilities in software applications, conducting security reviews, and implementing secure coding practices. The engineer will collaborate with development teams to integrate security tools into the Software Development Life Cycle (SDLC), perform regular security testing, and proactively identify and address potential risks. Documentation of security issues, staying up to date on evolving threats, and contributing to the overall security strategy will also be key responsibilities.

Qualifications

• Proficiency in identifying and mitigating security vulnerabilities, secure coding practices, and application security testing methods.
• Hands-on experience with secure code reviews, threat modeling, and penetration testing tools.
• Strong understanding of web application security standards such as OWASP Top 10, as well as defensive programming techniques.
• Experience with SDLC processes, CI/CD pipelines, and integrating security tools into development workflows.
• Knowledge of network security protocols, cryptographic principles, and data protection best practices.
• Excellent problem-solving and analytical skills, and the ability to convey technical findings to non-technical stakeholders.
• Relevant certifications in DevOps and DevSecOos are a plus.
• Bachelor’s degree in Computer Science, Cybersecurity, Information Technology, or a related field (or equivalent experience).
• Proficiency in programming languages like Java, Python, or C# is highly advantageous.