Cybersecurity Engineer - Web & Mobile Apps

We are an educational technology platform dedicated to student academic orientation and guidance. As our web platform and mobile applications continue to grow, safeguarding our systems, user data, and infrastructure is a top priority.

We are seeking a proactive and skilled Application Security Engineer to join our team on-site at our office. In this role, you will lead the security posture of both our web ecosystem and mobile apps, conducting vulnerability assessments, fortifying cloud environments, and ensuring end-to-end data privacy.

Key Responsibilities:

• Web & Mobile Penetration Testing: Conduct regular security audits, dynamic/static testing, and code reviews across our web platform, APIs, and mobile applications (iOS & Android).
• Vulnerability Mitigation: Identify, triage, and guide the remediation of security flaws based on the OWASP Top 10 and OWASP Mobile Top 10.
• API & Endpoint Hardening: Secure REST/GraphQL APIs against unauthorized access, data scrapping, injection attacks, and abuse by enforcing strict rate-limiting, WAF policies, and robust authentication mechanisms (OAuth2, JWT).
• Mobile App Security: Ensure client-side security on mobile devices (secure local data storage/KeyStore/Keychain, SSL pinning, anti-tampering, and secure biometrics).
• Cloud & Database Security: Review and harden cloud infrastructure, database access controls (IAM, RBAC), and encryption protocols (at rest and in transit).
• App Store & Regulatory Compliance: Verify compliance with Apple App Store and Google Play Console security & privacy requirements, as well as student data protection regulations.
• Incident Response & Monitoring: Implement monitoring tools, review security logs, and establish clear response protocols for potential threats or incidents.

Qualifications & Requirements:

• Experience: Minimum 2–4 years of proven hands-on experience in cybersecurity, web application security (AppSec), or mobile security.
• Core Knowledge: Strong understanding of web and mobile attack vectors (OWASP Web & Mobile Top 10), network protocols, and secure architecture design.
• Technical Skills: Familiarity with modern web/mobile stacks, API security, and security scanning/pentesting tools (e.g., Burp Suite, OWASP ZAP, MobSF, Postman).
• Mindset: Strong analytical thinking, problem-solving skills, and the ability to collaborate directly with developers in an on-site office environment.
• Education: Bachelor’s degree in Computer Science, Cybersecurity, Information Technology, or relevant certifications (e.g., OSCP, CEH, eWPT, Security+).

Key Skills to Select on Indeed:

• Application Security (AppSec)
• Mobile Application Security
• Penetration Testing
• OWASP Top 10 & Mobile Top 10
• API Security & Cloud Hardening

الراتب المدفوع: QAR٦٬٤٤٢٫١١ لكل شهر

موقع العمل: بشكل شخصي