application security specialist

Mynt Labs

<p><b>Mynt Labs</b> development team is seeking a highly skilled <b>Application Security Specialist</b> to join our team in Bahrain. In this key position, you'll support the security of our software development, spanning both back-end infrastructure and front-end user interfaces. If you have a passion for building secure, scalable, high-performance systems and a knack for cyber security, we want to hear from you.</p><p><b>Key Responsibilities</b></p><p>This is a hands-on technical cyber security role that requires knowledge of technical and organizational controls. Responsibilities include conducting vulnerability assessments, penetration testing, application security assessments and cloud security testing to help ensure Mynt Lab&rsquo;s cyber security:</p><ul><li>Threat Modeling, analyze potential threats and design secure product architectures.</li><li>Conduct regular vulnerability scans tests by using industry leading offensive security tools and methodologies to detect weaknesses and security issues in our developed software products.</li><li>Analyze vulnerability scan results and prioritize remediation efforts using standard risk assessment methodologies to ensure operationally feasible vulnerability closure.</li><li>Work with R&amp;D/Engineering to integrate security into the product development lifecycle (SDLC).</li><li>Develop and execute penetration testing plans using an agreed calendar of events to ensure that systems and applications are adequately covered during the tests.</li><li>Report vulnerability findings to management by presenting them in a readable format to ascertain the risk to the organization.</li><li>Simulate advanced persistent threats via red teaming exercises to test security defenses using leading offensive methods to identify and exploit security weaknesses and provide recommendations to improve security posture.</li><li>Research of AI Models security and attack techniques.</li></ul><p><b>Knowledge Skills and Experience</b></p><ul><li>Minimum 2 years of job-related experience with offensive security, similar experience as a software developer is a plus.</li><li>Red Teaming to identify weaknesses in the organization's products and/or processes</li><li>Vulnerability Scanning to ensure compliance with security standards Security Auditing of configurations and/or systems</li><li>Advanced capabilities on Application Security and technologies thereof</li><li>Advanced capabilities on Network Security and technologies there of Cloud Security Infrastructure and application penetration testing</li><li>Certifications that are considered as a plus:SANS GIAC Certified Web Application Defender (GWEB), Offensive Security Certified Professional (OSCP), Certified Ethical Hacker (CEH), GIAC Penetration Tester (GPEN)</li></ul><p><b>What We Offer </b></p><ul><li>Competitive salary and benefits package.</li><li>Opportunity to work on innovative AI technologies.</li><li>A collaborative, innovative, and fast-paced work environment.</li><li>Continuous learning and professional development opportunities.</li><li>The chance to make a significant impact on our products and company.</li></ul><p>Job Types: Full-time, Permanent</p><p>Ability to commute/relocate:</p><ul><li>Manama: Reliably commute or willing to relocate with an employer-provided relocation package (Required)</li></ul><p>Application Question(s):</p><ul><li>Do you have hands on experience working as an offensive security/penetration tester conducting software and API security testing? Please explain.</li></ul><p>Location:</p><ul><li>Manama (Preferred)</li></ul>

Application Security (AppSec) Specialist

Mindstream

<p><b>Urgent Hiring: Security Analyst (Application Security)</b></p><p><b>Location:</b> Onsite &ndash; Qatar</p><p><b>Key Skills &amp; Requirements:</b></p><ul><li>Professional hands-on experience in <b>Vulnerability Assessment &amp; Penetration Testing (VAPT)</b></li><li>Strong expertise in <b>Application Security Assessment</b> (Web, Mobile &amp; Thick Client applications)</li><li>In-depth knowledge of <b>Secure SDLC</b> and <b>OWASP frameworks</b></li><li>Proven experience with <b>OWASP Top 10</b> and <b>SANS CWE Top 25</b></li><li>Excellent understanding of <b>WAF concepts and bypass techniques</b></li><li>Experience in <b>manual application security code reviews</b></li><li>Hands-on experience with <b>SAST tools</b>: SonarQube, Fortify, Checkmarx, etc.</li><li>Hands-on experience with <b>DAST tools</b>: Burp Suite Enterprise, Invicti, Acunetix, etc.</li><li>Experience in <b>mobile application security testing</b> (Android &amp; iOS)</li><li>Proficiency with security tools such as <b>OWASP ZAP, Burp Suite, Frida, Objection</b>, etc.</li><li>Strong <b>presentation and communication skills</b> to advise developers and IT teams</li><li>Experience working in <b>Agile environments</b> is mandatory</li></ul><p>Job Type: Full-time</p><p>Application Question(s):</p><ul><li>Do you have hands-on experience in Application Security Assessment, including web, mobile, and thick client applications?</li><li>How many years of experience do you have in Vulnerability Assessment and Penetration Testing (VAPT)?</li><li>Are you experienced with OWASP Top 10, SANS CWE Top 25, and Secure SDLC practices?</li><li>Do you have experience communicating security findings and providing guidance to developers and IT teams in an Agile environment?</li><li>what is current and expected salary? Notice period?</li></ul>

Security Analyst (Application Security)

Qiddiya Investment Company

<div><p>Qiddiya Investment Company is looking for a highly-skilled and motivated <b>Assistant Manager - Application Security</b> to join our dynamic team. In this role, you will play a critical part in fortifying the security framework for our application development processes. You will work collaboratively with cross-functional teams to embed security best practices across all stages of the software development lifecycle (SDLC).</p><p>
Your responsibilities will include conducting comprehensive security assessments, performing vulnerability analysis, and offering guidance on secure coding practices. You will influence the culture of security within our organization, ensuring that applications are developed with a strong security mindset.</p><h3 class="jobSectionHeader"><b>
Key Responsibilities</b></h3><ul>
<li>Assist in strategizing and executing the application security roadmap aligned with organizational objectives.</li>
<li>Conduct regular security assessments and penetration testing on applications and services.</li>
<li>Provide actionable guidance for developers on remediating identified vulnerabilities.</li>
<li>Participate in threat modeling and risk assessment activities.</li>
<li>Facilitate training sessions and workshops to promote awareness of secure coding practices.</li>
<li>Stay up-to-date with the latest security trends, vulnerabilities, and industry standards.</li>
<li>Collaborate with DevOps teams to integrate security tools and practices into CI/CD pipelines.</li>
<li>Document and report on security metrics and the status of remediation efforts.</li>
</ul><p><b>
Requirements</b></p><ul>
<li>
Bachelor's degree in Computer Science, Cybersecurity, Information Technology or related discipline.</li>
<li>Minimum 4 years of professional experience in application security or software development roles.</li>
<li>Expertise in application security frameworks and standards (e.g., OWASP Top Ten, NIST guidelines).</li>
<li>Experience with security testing tools (SAST, DAST, IAST) and vulnerability management.</li>
<li>Strong understanding of programming languages, secure coding practices, and software development methodologies.</li>
<li>Excellent communication skills, capable of conveying complex security concepts to non-technical stakeholders.</li>
<li>Relevant certifications (e.g., CISSP, CSSLP, CEH) are a plus.</li>
</ul><p><b>
Benefits</b></p><p>
Comprehensive benefits package</p></div>

Assistant Manager - Application Security

Netcracker

<p>We are looking for a person with good knowledge of web and mobile applications security testing, proven experience of handling large-scale security testing projects, including static and dynamic assessment methods for web, mobile and API s. it will be required to demonstrate the knowledge of common attacks for mobile, web and API systems and relevant methods of their remediation, secure design patterns of business flows within web and mobile applications, cryptography specifications (TLS, X.509, hashing and encryption algorithms, handshake) and their common implementation flaws, basic understanding for authentication standards (Oauth 2.0, Open ID Connect, SAML).</p>
<p>Demonstrable knowledge about test management using Jira or similar tools, test case set-up, report generation, defect management lifecycle and risk scoring using industry standard methodologies like CVSS. The role will be responsible for driving security testing activity, ensuring the timely delivery of assessments and collaborating with cross-functional teams in an implementation project for our clients.</p>
<p><strong>Principal Duties and Responsibilities:</strong></p>
<ul>
<li>Lead and manage a team of application security testers to execute comprehensive security testing across web, API, and mobile</li>
<li>Plan and prioritize testing activities to ensure timely delivery of security assessments and actionable remediation plans.</li>
<li>Conduct and direct, hands-on application security testing, including Static Application Security Testing (SAST), Dynamic Application Security Testing (DAST) and / or Mobile Application Security Testing (MAST) and / or Software Composition Analysis (SCA).</li>
<li>Produce clear and concise documentation like test strategy, test plan, testing report, issue summary along with prioritization based on risk and impact of the issue identified.</li>
<li>Work closely with Development, QA, and DevOps teams to embed security throughout the Software Development Lifecycle (SDLC).</li>
<li>Champion OWASP Top 10, CWE, and other global security standards across engineering practices.</li>
<li>Effectively manage reporting to client and different stakeholders on testing progress, issues, risks and collaborate on remediation of risks for testing process.</li>
<li>Monitor emerging threats and security trends, recommending improvements and countermeasures as needed.</li>
<li>Provide ongoing mentorship and training to junior team members and promote a security-first mindset.</li>
<li>Represent application security in cross-functional discussions and audits.</li>
</ul>
<p><strong>Background and Skills:</strong></p>
<ul>
<li>8 15 years of experience in Application Security Testing, with at least 2 3 years in a leadership or managerial role.</li>
<li>Proven experience in manual security testing techniques beyond tool-based scanning.</li>
<li>Strong hands-on expertise with SAST, DAST and SCA tools and frameworks.</li>
<li>Experience testing a range of applications including Web, RESTful APIs, and Mobile apps.</li>
<li>Deep understanding of OWASP Top 10, CWE, secure coding practices, and vulnerability mitigation techniques.</li>
<li>Familiarity with DevSecOps principles and integrating security testing into CI/CD pipelines</li>
<li>Strong communication, stakeholder management, and reporting skills.</li>
<li>Relevant certifications such as OSCP, CEH, GWAPT, or equivalent are a plus.</li>
</ul>

Application Security Testing Manager

Celfocus

<div><p><b>Make an impact</b> by working for sectors where technology is the enabler, everything is ground-breaking and there&rsquo;s a constant need to be innovative.</p><p><b>
Be part of the team</b> that combines business knowledge, technological edge and a design experience. Our different backgrounds and know-how are key in developing solutions and experiences for digital clients.</p><p><b>
Face challenges</b> and learn other ways of thinking and seeing the world - there&rsquo;s always room for your energy and creativity.</p><p><b>
About the role</b></p><p>
Celfocus is looking to add an Application Security Analyst to join our team.</p><p><b><br>
As a part of your job, you will:</b></p><ul><li><p>
Conducting analysis and threat modeling for new and existing Celfocus products/projects.</p></li><li><p>
Analyzing and discussing requirements; interacting with all participants in the software development process.</p></li><li><p>
Penetration testing web applications.</p></li><li><p>
Conducting both manual and automated testing.</p></li><li><p>
Participating in the creation and development of the company's products at all stages of their life cycle.</p></li></ul><p><b>
What are we looking for?</b></p><ul><li><p>
Previous experience as a DevSecOps Security Analyst</p></li><li><p>
Profound security assurance tool knowledge</p></li><li><p>
Profound CI/CD knowledge</p></li><li><p>
Profound vulnerability knowledge</p></li><li><p>
Basic understanding of security compliance requirements</p></li><li><p>
Capability to align with teams from Analysts, Designers, Architects, Developers to DevOps.</p></li><li><p>
Knowledge of HTTP.</p></li><li><p>
Working knowledge of programming languages</p></li><li><p>
Knowledge of the Top 10 OWASP vulnerabilities: how to find, exploit and fix them.</p></li><li><p>
Knowledge of Burp Suite or other popular web scanners like ZAP, Acunetix, Netsparker, etc.</p></li><li><p>
The desire and ability to work in a team.</p></li><li><p>
The desire to develop yourself in the field of application security.</p></li><li><p>
A lively and flexible mind, clear logic, a detail-oriented approach</p></li><li><p>
Knowledge of English at least at the level of reading technical documentation.</p></li></ul><p><b>
Nice to have:</b></p><ul><li><p>
Good knowledge of Linux or Windows operating systems.</p></li><li><p>
Skills in scripting and automating your work using Powershell, Python, Bash, etc.</p></li><li><p>
Knowledge of the OWASP Application Security Verification Standard (ASVS) , OWASP Testing Guide and experience in whole product or feature planning.</p></li><li><p>
An understanding of browser security mechanisms (SOP, cookies, CSP, HSTS, etc.)</p></li><li><p>
Familiarity with various protocols and attacks against them (OAuth, JWT, websockets, etc.)</p></li><li><p>
Experience with public clouds (Azure, AWS, GCP)</p></li><li><p>
Experience with pipeline Orchestrators (Jenkins, Azure DevOps, GitLab CI/CD)</p></li><li><p>
Penetration testing experience</p></li></ul><p>
Personal traits:</p><p>
Ability to adapt to different contexts, teams and Clients</p><p>
Teamwork skills but also sense of autonomy</p><p>
Motivation for international projects and ok if travel is included</p><p>
Willingness to collaborate with other players</p><p>
Strong communication skills</p><p></p><p>
Believe this is you? Come join the Team! At Celfocus, we are committed to cultivate a diverse and inclusive workplace. As an equal-opportunity employer, we welcome applicants of all backgrounds, gender identities, and abilities. We are dedicated to providing reasonable accommodations for candidates with specific needs. If you require any adjustments during the selection process, please inform our Talent Acquisition Team.</p><p><b>
Come join the Team!</b></p></div>

Application Security Engineer

Renown Health

<div><div><div><div><div><div><div><div><div><div><p><b>Position Purpose</b></p><br>
</div></div><br>
<div><div><div><div><div><div><div><div><div><div><p>This position leads in the analysis, design, coding, testing and implementation of new and existing application systems used within Renown Health entities. This position partners with the user community to resolve technical problems, application performance issues as well as lead optimization and enhancement efforts. This position oversees the design, configuration, testing and supporting of files and system changes within assigned products and scope, including system administration functions. The Senior Application Specialist will be a primary contact for external users for designated product(s), and will assist in leading large projects.</p><br>
</div></div><br>
</div></div></div></div><br>
</div></div></div></div><br>
</div></div><p></p><div><div><div><div><p><b>Nature and Scope</b></p><br>
</div></div><br>
<div><div><div><div><div><div><div><div><div><div><p>Responsibilities:</p>
<ul><li>Have a solid understanding of the business and operational aspects within the Renown Health entities, and the software/hardware used.</li></ul>
<ul><li>Oversee design, configuration, testing and supporting files within assigned products and scope.</li></ul>
<ul><li>Facilitates responses to Support Issues to successful resolution</li></ul>
<ul><li>Create and maintain appropriate documentation.
</li></ul><ul><li>Troubleshoot moderate to complex problems, requests and questions from end users.</li></ul>
<ul><li>Investigate end users preference while making design decisions about the underlying needs of the organization and user community, while navigating choices involved in application specifications</li></ul>
<ul><li>Demonstrates the ability to work on multiple, complex projects with high quality results and adherence deadlines.</li></ul>
<ul><li>Analyze business operations as they relate to design decisions, and prioritize and implement requested changes to the system.</li></ul>
<ul><li>Collect information regarding potential system enhancement needs, and analyze new functionality in releases to determine how/if it should be used, and review and test each new release.</li></ul>
<ul><li>Dependent on the Application(s) supported this position may be required to take call.
</li></ul><ul><li>Develop Level of Effort estimates and track actual time worked accurately.</li></ul><br>
<p></p><p>Project Management:</p>
<ul><li>Demonstrate Project Management Skills, own project plans in designated area and uses Microsoft project or other tools to track tasks, manage project plans.</li></ul>
<ul><li>Maintain regular communication with Business Owners, Project Managers, vendors and customers.</li></ul>
<ul><li>Assists in the emergent change approval process</li></ul>
<ul><li>Perform in-depth analysis of workflows, data collection, report details, and other technical issues associated with software/hardware used.</li></ul><br>
<p></p><p>Information Integrity:</p>
<ul><li>Develop clear and concise process flows and supporting documentation for business owners and units.</li></ul>
<ul><li>Set and adhere to standards for naming and numbering conventions, change control, environment management and security classifications.
</li></ul><ul><li>Demonstrates a solid understanding of Data Architecture and Integration concepts and strategies, experienced in designing data integration solutions required.</li></ul><br>
<p></p><p>Teamwork, Collaboration, Professionalism, and Leadership:</p>
<ul><li>Demonstrate the ability to facilitate meetings with customers to prioritize needs, set expectations and brings new functionality/design for review.</li></ul>
<ul><li>Leads work groups within the department or within project scope.</li></ul>
<ul><li>In general, works with a high level of independence</li></ul>
<ul><li>Coordinates resources with other teams in order to facilitate work and project completion, may coordinate and/or participate in testing efforts.</li></ul>
<ul><li>Demonstrate excellent interpersonal, organizational, and communication skills</li></ul>
<ul><li>Demonstrate the ability to manage projects and work load independently, as well as part of a team.</li></ul>
<ul><li>Provide knowledge transfer and mentoring to peers</li></ul>
<ul><li>Creates training documentation for areas of expertise</li></ul><br>
<p></p><p>This position does not provide patient care.</p><br>
</div></div><br>
</div></div></div></div><br>
</div></div></div></div><br>
<p></p><div><div><div><div><div><div><p><b>Disclaimer</b></p><br>
</div></div><br>
<div><div><div><div><div><div><p>The foregoing description is not intended and should not be construed to be an exhaustive list of all responsibilities, skills and efforts or work conditions associated with the job. It is intended to be an accurate reflection of the general nature and level of the job.</p><br>
</div></div><br>
</div></div></div></div><br>
</div></div></div></div><br>
</div></div><p></p><div><div><div><div><p><b>Minimum Qualifications</b><br>
Requirements - Required and/or Preferred</p><br>
</div></div><br>
<div><div><div><div><div><div><div><div><div><div><p><b>Name</b></p><br>
</div><div><p><b>Description</b></p><br>
</div></div><br>
<div><div><p>Education:</p><br>
</div><div><p>Must have working-level knowledge of the English language, including reading, writing and speaking English. Bachelor's Degree in a health, science, or business field, or an equivalent level of professional experience <i>required</i>.</p><br>
</div></div><br>
<div><div><p>Experience:</p><br>
</div><div><p>4-6 years&rsquo; experience in application configuration/design experience, with at least 2 years configuration/design and implementation experience in the application as related to the position filled required.
</p><p>4+ years&rsquo; experience working in a Healthcare setting, physician practice or hospital preferred.</p>
<p>Project Management experience preferred</p><br>
</div></div><br>
<div><div><p>License(s):</p><br>
</div><div><p>None</p><br>
</div></div><br>
<div><div><p>Certification(s):</p><br>
</div><div><p>Application Certification or Accreditation may be required on application(s) supporting. Must stay current on new version and obtain re-certification as applicable.</p><br>
</div></div><br>
<div><div><p>Computer / Typing:</p><br>
</div><div><p>Must be proficient with Microsoft Office Suite, including Outlook, PowerPoint, Excel, Access, Project and Word and have the ability to use the computer to complete online learning requirements for job-specific competencies, access online forms and policies, complete online benefits enrollment, etc.</p>
<p>Previous SQL, C++, C#, (M), Java etc. programming experience <i>preferred</i>.</p><br>
</div></div><br>
</div></div></div></div><br>
</div></div></div></div><br>
</div></div></div></div></div></div></div><br>
<p></p>Location: Renown Health &middot; 100641 IT Hospital<br>
Schedule: Full Time - Eligible for Benefits, Day, 8-5</div>

Senior Application Specialist - Epic Security

Holland & Barrett International Limited

<p>About the role:</p> <p>At Holland & Barrett, cybersecurity is at the heart of our digital transformation. As we continue to grow and innovate, securing our applications and protecting customer data is a top priority. We are looking for a <strong>Senior Application Security Engineer</strong> to lead our efforts in strengthening application security, mitigating risks, and ensuring best-in-class security practices. If you are passionate about cybersecurity and eager to make a real impact, we want you on our team!</p> <p><strong>Key Responsibilities:</strong></p> <ul> <li><strong>Security Strategy:</strong> Help define and execute the Holland & Barrett application security strategy. Collaborate with both tech and non-tech teams to integrate security principles into the early stages of product design and development.</li><li><strong>Secure SLDC:</strong> Establish a secure Software Development Lifecycle (SDLC) that enables development teams to deliver high-quality applications quickly while implementing essential controls for software integrity, authenticity, and third-party library management.</li><li><strong>Risk Assessments:</strong> Conduct risk assessments, threat modeling, and architecture reviews alongside development teams, producing artifacts to drive the implementation of effective security controls.</li><li><strong>Standards Development:</strong> Own the creation and maintenance of tailored security standards and guidelines, developing reusable resources for various development teams.</li><li><strong>Team Support:</strong> Provide guidance and support to development teams on secure software production practices and flaw mitigation strategies.</li></ul> <p>Key requirements:</p> <p><strong>Essential:</strong></p> <ul> <li>5+ years of experience in application security, with at least 3+ years in software development.</li><li>Strong understanding of application security concepts, including secure coding practices, threat modeling, vulnerability management, and access control mechanisms.</li><li>Experience with AWS, Kubernetes, Service Mesh, and API Security (including authentication and authorization).</li><li>Proficiency in programming languages such as Python, Java, JavaScript, GoLang, and Rust.</li><li>Familiarity with Agile methodologies like SCRUM, along with proven project management skills to oversee multiple security projects simultaneously.</li></ul> <p><strong>Desired:</strong></p> <ul> <li>Independent, proactive, and detail-oriented, with a commitment to maintaining high security standards.</li><li>Strong communication and interpersonal skills, facilitating effective collaboration with both technical and non-technical teams.</li></ul> <p>What we offer:</p> <p><strong>What we offer:</strong></p> <p><strong>Wellbeing & Lifestyle Benefits</strong> </p> <ul> <li>Health Cash Plan </li><li>Life Assurance</li><li>Incentive Scheme - Based on company & personal performance</li><li>Virtual GP </li><li>Private Medical care</li><li>FREE at-home blood test kit </li><li>Holiday Purchase option </li><li>Pension Contribution scheme</li><li>Access to 'Wellhub' with gyms, studios and wellbeing apps </li></ul> <p><strong>Discounts & Savings</strong> </p> <ul> <li>25% Colleague Discount with FREE Next Day Delivery </li><li>Exclusive Discounts from a wide range of partners </li><li>£/€50 Annual Product Allowance to spend in store </li></ul> <p><strong>Learning & Development</strong> </p> <ul> <li>Access to a variety of learning opportunities, including Level 2-5 Apprenticeships, Workshops and our Digital Learning Library </li><li>AND MORE! </li></ul> <p>Our culture respects equality, values diversity and encourages individuality - because this allows our people to unlock their potential and be their best. We welcome everyone who shares our EPIC values regardless of background, culture, disability, ethnicity, gender identity or sexual orientation</p> <p>Holland & Barrett does not accept unsolicited resumes from search firms/recruiters. Please do not forward resumes to our job alias, employees, or any other company location. Holland & Barrett is not and will not be responsible for any fees if a candidate submitted by a search firm/recruiter unless otherwise agreed with respect to specific open position(s).</p>

Senior Application Security Engineer

Search 10000+ Application security specialist jobs near you this January. New roles added regularly across leading industries. Apply today.