Assistant Manager - Application Security

Qiddiya Investment Company; Riyadh; On-site; SAR 90,000 - 120,000; Full time

Job summary

A leading investment firm in Riyadh is seeking an Assistant Manager - Application Security to enhance their cybersecurity efforts. This role involves implementing security measures across the software development lifecycle and conducting security assessments to safeguard applications. The ideal candidate has 4-6 years of experience in application security, a relevant degree, and strong analytical skills. The company offers a comprehensive benefits package.

Benefits

Comprehensive benefits package

Qualifications

• 4-6 years of experience in application security or software development.
• Strong understanding of tools like OWASP.
• Relevant certifications (e.g., CISSP, CSSLP) are preferred.

Responsibilities

• Develop and implement application security policies and practices.
• Conduct security assessments and penetration testing.
• Provide training on secure coding practices.

Skills

Application security principles

Security testing methodologies

Analytical skills

Communication skills

Education

Bachelor's degree in Computer Science or related field

Job description

Qiddiya Investment Company is seeking a motivated and detail-oriented Assistant Manager - Application Security to strengthen our cybersecurity team. In this pivotal role, you will support the implementation of security measures throughout the software development lifecycle (SDLC), ensuring that our applications are resilient against potential threats and vulnerabilities.

Working closely with various stakeholders, you will conduct security assessments, provide strategic guidance to our development teams, and foster a culture of security awareness in application development practices.

Key Responsibilities

• Assist in developing and implementing application security policies, standards, and best practices.
• Perform security assessments, code reviews, and penetration testing on applications to identify vulnerabilities.
• Collaborate with software development teams to integrate security throughout the SDLC.
• Conduct training and awareness sessions focused on secure coding practices for development teams.
• Stay informed of the latest security trends and technologies to provide effective recommendations.
• Support incident response activities related to application security breaches and vulnerabilities.
• Document security assessments findings and work with developers to prioritize and remediate vulnerabilities.
• Prepare reports on application security metrics and insights for management.

• Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related field.
• 4-6 years of experience in application security, software development, or related fields.
• Strong understanding of application security principles, tools, and frameworks (e.g., OWASP).
• Proficient in security testing methodologies and tools.
• Excellent analytical and problem-solving skills.
• Strong communication skills, with the ability to work collaboratively across teams.
• Relevant certifications (e.g., Certified Information Systems Security Professional (CISSP), Certified Secure Software Lifecycle Professional (CSSLP)) are preferred.

Comprehensive benefits package