Application Security Specialist at GSSTech Group

Abu Dhabi, Abu Dhabi, United Arab Emirates -

Full Time

Start Date

Immediate

Expiry Date

25 Jun, 26

Salary

0.0

Posted On

27 Mar, 26

Experience

5 year(s) or above

Remote Job

Yes

Telecommute

Yes

Sponsor Visa

Skills

Application Security, Vulnerability Assessments, Penetration Testing, Secure Code Reviews, Threat Modelling, Risk Assessments, Secure Coding Practices, CI/CD Pipelines, DevSecOps, SAST, DAST, WAF, Incident Response, Java, Dot NET, Node.js

Industry

IT Services and IT Consulting

Description

We are seeking a skilled and detail-oriented Application Security Specialist to strengthen the security posture of our enterprise applications. The ideal candidate will be responsible for identifying, analysing, and mitigating security risks across the software development lifecycle, while collaborating closely with development and infrastructure teams to ensure secure application design and deployment. Key Responsibilities Implement and maintain robust application security controls across enterprise systems Conduct vulnerability assessments, penetration testing, and secure code reviews Perform threat modelling and risk assessments for new and existing applications Collaborate with development teams to integrate secure coding practices within the SDLC Support the integration of security tools within CI/CD pipelines (DevSecOps practices) Configure and manage application security tools such as SAST, DAST, and Web Application Firewalls (WAF) Monitor and respond to application-level security incidents, ensuring timely resolution Provide guidance and awareness to development teams on security best practices Required Qualifications & Experience Minimum 5 years of experience in cybersecurity, with a strong focus on application security In-depth knowledge of the OWASP Top 10 and common web application vulnerabilities Hands-on experience with vulnerability assessment tools, SAST/DAST solutions, and WAF technologies Strong understanding of secure coding practices across technologies such as Java, .NET, Node.js, or similar Experience working in Agile/DevOps environments with cross-functional teams Strong analytical and problem-solving skills, with attention to detail Preferred Qualifications Relevant certifications such as CISSP, CEH, OSCP, or equivalent Experience with cloud platforms (AWS, Azure, or GCP) and related security practices Familiarity with DevSecOps frameworks and automation tools Key Competencies Strong communication and stakeholder management skills Ability to identify and remediate security risks effectively Proactive approach to continuous improvement in application security

Responsibilities

The specialist will be responsible for identifying, analyzing, and mitigating security risks across enterprise applications throughout the software development lifecycle. Key duties include implementing security controls, conducting testing, performing threat modeling, and integrating security tools into CI/CD pipelines.