Security Engineer: Code Review & Secure SDLC Champion

Rihal; Muscat; On-site; OMR 12,000 - 18,000; Full time

Job summary

Rihal is seeking a Security Engineer to implement and maintain security measures that protect the organization’s digital assets. The role requires foundational cybersecurity knowledge and a willingness to learn under the guidance of senior engineers.

You will act as the single point of contact for product security, perform security code reviews, and contribute to secure architecture and threat modeling. You’ll work with engineering teams to embed security into the SDLC and track remediation

Qualifications

• Proven experience in security code review and identifying vulnerabilities beyond automated scanners.
• Solid understanding of threat modeling, secure design patterns and zero trust concepts.
• Familiarity with OWASP Top 10, CWE/SANS Top 25, and common vulnerability classes.
• Working knowledge of SAST/DAST/SCA tools and CI/CD security integration.
• Ability to communicate findings clearly to technical and non-technical stakeholders.

Responsibilities

• Act as the single point of contact between security and product/engineering for security matters.
• Perform security code reviews across codebases to identify vulnerabilities before release.
• Review and contribute to security architecture, threat modeling, and secure design patterns.
• Embed security requirements into design, development, and deployment stages (Secure SDLC).
• Triage, validate, and help remediate vulnerabilities from code review, SAST/DAST, and tests.
• Define and maintain secure coding standards, guidelines, and checklists.
• Support integration of security tooling into CI/CD pipelines (SAST, SCA, secrets, container scanning).
• Provide security guidance on API design, authentication/authorization, and data protection.
• Track and report product security posture and remediation timelines to management.
• Stay current on emerging threats and industry best practices (OWASP, CWE/SANS Top 25).

Skills

Security code review

Security architecture

OWASP Top 10

CWE/SANS Top 25

SAST/DAST/SCA tools

DevSecOps

Threat modeling

Cloud platforms

Kubernetes security

Communication with stakeholders

Software development experience

CI/CD security gates

Tools

Semgrep

SonarQube

Checkmarx

Snyk

Job description

Rihal is seeking a Security Engineer to implement and maintain security measures that protect the organization’s digital assets. The role requires foundational cybersecurity knowledge and a willingness to learn under the guidance of senior engineers.

You will act as the single point of contact for product security, perform security code reviews, and contribute to secure architecture and threat modeling. You’ll work with engineering teams to embed security into the SDLC and track remediation