As a Security Consultant, you will be responsible for helping clients effectively prepare for, proactively mitigate, and detect and respond to cybersecurity threats. You will work on engagements that may include assisting clients in navigating technically complex and high-profile incidents, performing forensic analysis, threat hunting, and malware triage. Additionally, you will test client networks, applications, and devices by emulating the latest techniques to help them defend against threats. You will present complex concepts to business stakeholders and executive leadership while leading complex engagements alongside cross-functional teams.
Ready to apply for roles like this?
Unlock the company name and direct application link. Subscribers get instant access to fresh jobs across Dubai, Abu Dhabi and Riyadh, many with visa support.
Unlock employer & apply directly
Location: Doha, Qatar
Work Conditions: On-site, Full-time
Language Requirements: Not specified.
Responsibilities:
- Conduct comprehensive security assessments of web applications, APIs, and mobile applications by identifying, exploiting, and validating vulnerabilities using industry-standard methodologies such as the OWASP Web Security Testing Guide (WSTG), OWASP API Security Top 10, and OWASP Mobile Application Security Testing Guide (MASTG).
- Discover critical vulnerabilities in applications and weaponize them.
- Expand team capabilities through tool creation, research on offensive techniques, and knowledge sharing.
- Develop comprehensive reports and presentations for technical and executive audiences, acting as a trusted advisor.
- Assist with scoping prospective engagements and mentor other staff.
Minimum Qualifications:
- Bachelor's degree in Cybersecurity (focus on offensive security) or equivalent practical experience.
- 3 years of experience in areas such as web application security assessment, mobile application security assessment, API security assessment, and red team assessments.
- Experience delivering reports and presentations to both technical and executive audiences.
- Familiarity with operating system security across various platforms, including Linux.
Preferred Qualifications:
- Relevant certifications in application security (e.g., BSCP, OSWE, eWPTX, eMAPT, or SANS courses).
- Experience in security tool creation and programming languages (Python, C#, C/C++, Rust, Nim, etc.).
- Proven experience in conducting web application, API, and mobile security assessments following industry standards.
- Familiarity with penetration testing tools such as Burp Suite Professional, Postman, nuclei, ffuf, and sqlmap.
