Cyber Security Engineer

Role Overview

We are seeking a skilled Cybersecurity Engineer and Consultant with extensive hands-on experience in OpenText Fortify and application security. The individual will be responsible for deploying, configuring, integrating, and maintaining Fortify security solutions within enterprise environments while offering expert cybersecurity consulting and professional services.

Key Responsibilities

• Implement, configure, and provide ongoing support for OpenText Fortify application security platforms.
• Perform thorough application security assessments using Fortify tools such as SAST, SCA, and DAST/WebInspect.
• Manage Fortify Software Security Center (SSC) operations and administration.
• Integrate Fortify with enterprise development ecosystems and automate security testing within CI/CD pipelines.
• Champion DevSecOps initiatives by embedding continuous security testing throughout the software development lifecycle.
• Set up and fine-tune scan policies, security rules, application profiles, and other security controls within Fortify.
• Analyze scan outputs, conduct vulnerability triage, validate findings, and filter false positives effectively.
• Collaborate with development teams to identify root causes of vulnerabilities and guide remediation efforts.
• Continuously monitor application security risks and generate comprehensive security reports and dashboards.
• Support Fortify system upgrades, migrations, integrations, configuration adjustments, and troubleshooting.
• Design customized application security architectures tailored to customer needs.
• Conduct security assessments, technical workshops, demos, and knowledge-shares to stakeholders.
• Document high and low-level designs, implementation strategies, configuration manuals, and operational procedures.
• Work cross-functionally with development, DevOps, infrastructure, SOC, cybersecurity, and project teams to ensure cohesive security operations.
• Provide expert technical consulting during all phases including implementation, testing, deployment, and ongoing support.
• Identify enhancements to application security processes, automate workflows, and elevate DevSecOps maturity.
• Ensure compliance with organizational security standards and adherence to application security best practices.

Required Skills & Experience

• Proficient in OpenText Fortify including SAST, SCA, SSC, and DAST/WebInspect tools.
• Strong knowledge of application security testing methodologies, vulnerability management, and risk assessment.
• Experience integrating security tooling with CI/CD pipelines within DevOps frameworks (GitLab CI/CD, Jenkins, Azure DevOps, GitHub Actions).
• Understanding of secure software development lifecycle (SDLC), DevSecOps principles, and security governance.
• Expertise in configuring Fortify scanning policies, security controls, and analyzing vulnerability results.
• Familiarity with REST APIs, automation, scripting, and security toolchain integration.
• Excellent communication and stakeholder management skills for customer-facing roles.
• Ability to troubleshoot complex security issues and provide actionable recommendations independently.
• Prior experience in enterprise application security environments, professional services or consulting preferred.
• Minimum 5 years of relevant cybersecurity, application security, or security engineering experience.

Preferred Certifications

• OpenText Fortify Certification
• Certified Ethical Hacker (CEH)
• Offensive Security Certified Professional (OSCP)
• Certified Information Systems Security Professional (CISSP)
• Certified Secure Software Lifecycle Professional (CSSLP)
• GIAC Security Certifications
• Relevant DevSecOps or Application Security certifications

Location

Position is based onsite in Doha, Qatar.