Base Career helps you apply smarter for this job.
Key skills for this role
We are looking for a hands-on Cybersecurity professional with 6 months to 1 year of practical experience who has already worked with real-world security tools through previous employment, internships, training, or personal projects.
This is not a theory role.
You will be responsible for implementing, enforcing, and monitoring security processes across our engineering stack.
You will sit between DevOps and Developers, ensuring security is built into the system — not added later.
If you like ownership, execution, and accountability, this role is for you.
What You’ll Do (No Excuses, Real Work) Actively run SAST & DAST scans on applications and APIs.
Implement security checks inside CI/CD pipelines (not just suggest them).
Ensure security processes are followed, flagged, and fixed — no silent bypasses.
Work directly with Developers & DevOps to close vulnerabilities.
Validate fixes and re-test until closure.
Maintain security reports, scan results, and remediation status.
Identify gaps in current security workflows and help improve them.
Own security hygiene and make sure it doesn’t slip.
What We Expect (Must-Have) Proven hands-on experience with SAST / DAST through: Internships Industry training Academic or personal security projects Working knowledge of application security processes.
Familiarity with OWASP Top 10 vulnerabilities.
Understanding of CI/CD pipelines and how security fits into them.
Ability to read scan outputs, understand risks, and communicate fixes clearly.
Strong follow-through mindset — issues are tracked until resolved.
Comfortable calling out when processes are not being followed.
Good to Have (Strong Advantage) Hands-on exposure to tools like: OWASP ZAP, Burp Suite Snyk, SonarQube, Trivy Basic knowledge of cloud environments (AWS/GCP/Azure).
We are looking for a hands-on Cybersecurity professional with 6 months to 1 year of practical experience who has already worked with real-world security tools through previous employment, internships, training, or personal projects.
Skip the repetitive application forms
Install the Base Career Chrome Extension and autofill job applications across major job boards with your profile.
Trusted by over 500,000 job seekers on Base Career
More from this employer
Sharjah, UAE
Dubai, UAE
Mohali, IND
Mohali, IND
Mohali, IND
Mohali, IND
This is not a theory role.
You will be responsible for implementing, enforcing, and monitoring security processes across our engineering stack.
You will sit between DevOps and Developers, ensuring security is built into the system — not added later.
If you like ownership, execution, and accountability, this role is for you.
What You’ll Do (No Excuses, Real Work) Actively run SAST & DAST scans on applications and APIs.
Implement security checks inside CI/CD pipelines (not just suggest them).
Ensure security processes are followed, flagged, and fixed — no silent bypasses.
Work directly with Developers & DevOps to close vulnerabilities.
Validate fixes and re-test until closure.
Maintain security reports, scan results, and remediation status.
Identify gaps in current security workflows and help improve them.
Own security hygiene and make sure it doesn’t slip.
What We Expect (Must-Have) Proven hands-on experience with SAST / DAST through: Internships Industry training Academic or personal security projects Working knowledge of application security processes.
Familiarity with OWASP Top 10 vulnerabilities.
Understanding of CI/CD pipelines and how security fits into them.
Ability to read scan outputs, understand risks, and communicate fixes clearly.
Strong follow-through mindset — issues are tracked until resolved.
Comfortable calling out when processes are not being followed.
Good to Have (Strong Advantage) Hands-on exposure to tools like: OWASP ZAP, Burp Suite Snyk, SonarQube, Trivy Basic knowledge of cloud environments (AWS/GCP/Azure).
with Docker, Kubernetes, or container security.
Understanding of API security, authentication, and authorization.
Any real-world security assessment, PoC, or bug-finding experience.
Who Should NOT Apply If you only know security theory.
If you’ve never run a real security scan.
If you avoid accountability or ownership.
If process enforcement feels “too strict” for you.
What You’ll Gain Real-world DevSecOps experience.
Exposure to production-grade security workflows.
Direct collaboration with engineering & DevOps teams.
Ownership of security processes that actually matter.
Strong foundation for roles in Application Security / DevSecOps.
Bonus Points GitHub with security projects Reports from security tools you’ve used Blog posts / write-ups / labs / CTF experience
Private SaaS company providing no-code local-commerce, ordering, delivery, and customer-engagement tools to businesses.
Visit company websiteJobs and hiring trendsFull-time
Entry
Onsite
Apply faster on company sites with our extension.