Application Security Consultant

Note: By applying to this position you will have an opportunity to share your preferred working location from the following: Dubai - United Arab Emirates; Doha, Qatar; Riyadh Saudi Arabia.

Minimum qualifications:

Bachelor's degree in cybersecurity, with a focus on offensive security or equivalent practical experience.

3 years of experience in three of the following security areas: web application security assessment, mobile application security assessment, API security assessment, red team assessments, EDR evasion, exploit development, cloud, social engineering, scripting, tool development.

Experience delivering reporting and presentations to both technical and executive audiences.

Experience with operating system security across operating systems or Linux.

Preferred qualifications:

Certifications related to application security including BSCP, OSWE, eWPTX, eMAPT, 8ksec CMSE or relevant SANS courses.

Experience in creating security tools and understanding of underlying programming languages such as Python, C#, C/C++, Rust, Nim or similar.

Experience conducting web application, API, and mobile (iOS and Android) security assessments following industry standards such as OWASP WSTG/ASVS, OWASP Top 10, OWASP API Top 10 and OWASP MASVS/MASTG.

Experience in web application and API penetration testing tooling including Burp Suite Professional, Burp Suite extensions, Postman, nuclei, ffuf and sqlmap.