Application Security Engineer

Duration: 18 Months
Nationality: Arab

Job Summary

We are looking for an experienced Infrastructure, Network & Security Engineer to protect applications throughout the software development lifecycle by identifying security vulnerabilities, implementing secure development practices, and ensuring applications meet organizational security standards and compliance requirements.

Key Responsibilities

Application Security Assessment

• Conduct application security assessments, vulnerability assessments, and penetration testing.
• Identify and analyze security vulnerabilities across web, mobile, and API applications.
• Assess applications against OWASP and industry security standards.
• Recommend and track remediation of identified vulnerabilities.

Secure Software Development

• Integrate security practices into the Software Development Lifecycle (SDLC).
• Conduct security reviews of application architecture, designs, and source code.
• Provide secure coding guidance to development teams.
• Support implementation of Security by Design principles.

Security Testing & Automation

• Perform SAST, DAST, SCA, API security testing, and other application security testing.
• Configure and manage application security testing tools.
• Integrate security testing into CI/CD pipelines.
• Validate remediation and perform security regression testing.

Vulnerability Management

• Analyze, prioritize, and track application vulnerabilities based on risk.
• Coordinate with developers and technical teams for remediation.
• Conduct root cause analysis of security issues.
• Monitor emerging application security threats and vulnerabilities.

Security Architecture & Compliance

• Review application architectures for security risks and control gaps.
• Define and recommend application security controls and standards.
• Support compliance with organizational security policies and applicable regulations.
• Maintain application security guidelines, standards, and documentation.

Collaboration & Continuous Improvement

• Collaborate with developers, DevOps, infrastructure, QA, and cybersecurity teams.
• Contribute to continuous improvement of application security processes and practices.

Required Skills & Experience

• 4–6 years of relevant experience in Application Security, Cybersecurity, or Information Security.
• Strong experience in application security testing and vulnerability assessment.
• Hands-on experience with web applications, mobile applications, APIs, and cloud environments.
• Strong understanding of OWASP Top 10 and secure coding practices.
• Experience with SAST, DAST, SCA, penetration testing, and vulnerability management .
• Experience integrating security into SDLC and CI/CD environments .
• Strong knowledge of application security threats, vulnerabilities, and remediation techniques.

Education & Certifications

• Bachelor's degree in Computer Science, Cybersecurity, Information Security, or a related field.
• Certifications such as OSCP, CEH, GWAPT, CSSLP, or Security+ are an advantage.

Key Technical Skills

• Application Security
• OWASP Top 10
• Web & Mobile Application Security
• API Security
• SAST / DAST / SCA
• Vulnerability Assessment & Penetration Testing
• Secure SDLC / DevSecOps
• Secure Coding Practices
• CI/CD Security Integration
• Threat Modeling & Risk Assessment
• Source Code Security Review
• Security Testing Tools
• Python, Java, JavaScript, or similar programming languages
• Git and CI/CD tools
• Cloud Security Fundamentals