Azure-Centric DevSecOps & Application Security Engineer

Practical DevSecOps; Al Khobar; On-site; SAR 90,000 - 120,000; Full time

Job summary

Practical DevSecOps is looking for a highly skilled Application Security Engineer based in Al Khobar, Eastern Province, Saudi Arabia. This role demands 6–8 years of experience in DevSecOps and Cloud Security, focused on integrating security throughout the software development lifecycle.

The ideal candidate will lead initiatives in secure software development, cloud security, and application security, heavily involving hands-on technical execution. Certifications such as CISSP or CCSP are preferred alongside strong analytical skills and stakeholder management.

Qualifications

• 6–8 years of experience in DevSecOps, Application Security, Cloud Security, or related cybersecurity domains.
• Minimum 4 years of hands-on Azure security experience.
• Proven experience implementing DevSecOps practices in enterprise environments.

Responsibilities

• Design, implement, and maintain secure CI/CD pipelines using Azure DevOps.
• Integrate security controls into all phases of the software development lifecycle.
• Conduct secure code reviews for various programming languages.
• Perform hands-on vulnerability assessments and penetration testing.
• Support compliance initiatives related to cybersecurity standards.

Skills

Azure DevOps

Secure SDLC

Threat Modeling

Vulnerability Assessment & Penetration Testing

Cloud Security

Secure Application Architecture

Education

Bachelor's degree in Computer Science or related field

Tools

Microsoft Azure

Microsoft Defender for Cloud

Burp Suite Professional

Job description

Practical DevSecOps is looking for a highly skilled Application Security Engineer based in Al Khobar, Eastern Province, Saudi Arabia. This role demands 6–8 years of experience in DevSecOps and Cloud Security, focused on integrating security throughout the software development lifecycle.

The ideal candidate will lead initiatives in secure software development, cloud security, and application security, heavily involving hands-on technical execution. Certifications such as CISSP or CCSP are preferred alongside strong analytical skills and stakeholder management.