Cyber Security Analyst

AIQU; Riyadh; On-site; SAR 180,000 - 300,000; Full time

Job summary

AIQU in Riyadh is seeking an experienced Cyber Security Analyst to join our client’s security team. You will perform secure code reviews and lead vulnerability remediation across enterprise applications to strengthen our SSDLC and DevSecOps initiatives.

The role requires a strong background in OWASP Top 10, SAST/DAST/SCA tooling, and the ability to communicate risk to stakeholders while guiding developers toward secure coding practices.

Qualifications

• Bachelor's degree in cybersecurity, CS, or IT.
• Minimum 5+ years in application security or secure coding.
• Strong knowledge of OWASP Top 10 and common vulnerabilities.
• Experience with SAST/DAST/SCA tools and remediation guidance.

Responsibilities

• Perform manual and automated secure code reviews for enterprise apps.
• Identify, analyze, and report security vulnerabilities in source code.
• Review findings from SAST, DAST, and SCA tools.
• Provide remediation recommendations and support secure coding practices.
• Validate vulnerability fixes and ensure security requirements.
• Conduct application security assessments and design reviews.
• Promote SSDLC and DevSecOps practices.
• Develop and maintain secure coding standards and review procedures.
• Prepare technical reports and communicate risks to stakeholders.

Skills

Secure code review

SAST

DAST

SCA

OWASP Top 10

SSDLC

DevSecOps

Vulnerability analysis

Stakeholder management

Security reporting

Education

Bachelor's degree in Cybersecurity

Tools

Checkmarx

OpenText

SAST tools

DAST tools

SCA tools

Job description

We're looking for an experienced Cyber Security Analyst to join a leading client in Riyadh, Saudi Arabia.

Key Responsibilities:

• Perform manual and automated secure code reviews for enterprise applications.
• Identify, analyze, and report security vulnerabilities in application source code.
• Review findings from SAST, DAST, and Software Composition Analysis (SCA) tools.
• Provide remediation recommendations and support development teams in implementing secure coding practices.
• Validate vulnerability fixes and ensure applications meet security requirements.
• Conduct application security assessments and security design reviews.
• Support DevSecOps initiatives and promote Secure Software Development Lifecycle (SSDLC) best practices.
• Develop and maintain secure coding standards, guidelines, and review procedures.
• Prepare technical reports and communicate security risks to stakeholders.

Required Skills & Experience:

• Bachelor's degree in Cybersecurity, Computer Science, Information Technology, or a related field.
• 5+ years of experience in Application Security, Secure Code Review, or Software Development.
• Strong understanding of OWASP Top 10 and common application security vulnerabilities.
• Experience with Secure Code Review, Application Security Testing, and Vulnerability Analysis.
• Hands-on experience with SAST, DAST, and SCA tools.
• Experience with security assessment platforms such as Checkmarx, OpenText, or similar solutions.
• Knowledge of Secure Software Development Lifecycle (SSDLC) and secure development practices.
• Excellent analytical, problem-solving, and stakeholder management skills.