Location: Doha
Job Type:
Permanent
Closing Date:
2025-10-01
About vacancy
mselect is looking to hire a Senior Information Security Engineer for an Aerospace & Defense manufacturing client in Doha, Qatar. Candidates must have a minimum of 5-8 years of proven experience in information security roles. Fluency in English is a must.
Job Purpose
The Information Security Engineer will focus on ensuring applications and data are secure and built according to best security standards. This role will be the subject matter expert on creating secure code, application security, Vulnerability testing, and providing security validation to internal environments.
Key Responsibilities
Requirements
Required Certifications
*Only applicants meeting the strict criteria outlined above will be contacted as part of the shortlisting process.
Job Purpose
The Information Security Engineer will focus on ensuring applications and data are secure and built according to best security standards. This role will be the subject matter expert on creating secure code, application security, Vulnerability testing, and providing security validation to internal environments.
Key Responsibilities
- Perform scheduled penetration testing of applications
- Perform white, grey and black box security assessments
- Support JVs and Subsidiaries in implementing a Secure Software development lifecycle
- Perform Mobile Services security Assessments
- Support environment monitoring using available tools or help build internal tools to enable advanced threat detection and response
- Conduct Security Vulnerability Assessments and impact assessment on electronic assets
- Perform Security Assessments on ERP and other on-premises solutions
Requirements
- 5–8 years of proven experience in information security roles
- Strong background in application security with hands-on involvement in secure coding practices and threat modelling
- Expertise in web application penetration testing, including OWASP Top 10 vulnerabilities
- Experience in network penetration testing covering internal, external, and wireless assessments
- Skilled in mobile application and API penetration testing, identifying risks and securing integrations
- Proficiency in Vulnerability Assessment and Penetration Testing (VAPT) methodologies and tools
- Solid understanding of Secure Development Lifecycle (SDLC), including security controls integration across all phases
Required Certifications
- OSCP – Mandatory
- OSWE – Mandatory
- API Security – Mandatory
- SAST – Mandatory
- DAST – Mandatory
- Application Security (APPSEC) – Preferred
- Secure SDLC (SSDLC) – Preferred
*Only applicants meeting the strict criteria outlined above will be contacted as part of the shortlisting process.
