Application Security Consultant

Note: By applying to this position you will have an opportunity to share your preferred working location from the following: Dubai - United Arab Emirates; Doha, Qatar; Riyadh Saudi Arabia.

Minimum qualifications:

• Bachelor's degree in cybersecurity, with a focus on offensive security or equivalent practical experience.
• 3 years of experience in three of the following security areas: web application security assessment, mobile application security assessment, API security assessment, red team assessments, EDR evasion, exploit development, cloud, social engineering, scripting, tool development.
• Experience delivering reporting and presentations to both technical and executive audiences.
• Experience with operating system security across operating systems or Linux.

Preferred qualifications:

• Certifications related to application security including BSCP, OSWE, eWPTX, eMAPT, 8ksec CMSE or relevant SANS courses.
• Experience in creating security tools and understanding of underlying programming languages such as Python, C#, C/C++, Rust, Nim or similar.
• Experience conducting web application, API, and mobile (iOS and Android) security assessments following industry standards such as OWASP WSTG/ASVS, OWASP Top 10, OWASP API Top 10 and OWASP MASVS/MASTG.
• Experience in web application and API penetration testing tooling including Burp Suite Professional, Burp Suite extensions, Postman, nuclei, ffuf and sqlmap.