Cybersecurity Specialist

Apexops; Riyadh; On-site; SAR 167,000 - 246,000; Full time

Benefits offered by this job

Health insurance

GOSI registration

Job summary

ARK47 Studio in Riyadh seeks a cybersecurity specialist to monitor the app, APIs and cloud systems, detect threats, and manage incident response from detection to recovery.

We require 3+ years in security operations, vulnerability management or application security, good knowledge of web application and cloud security (OWASP Top 10), and familiarity with the National Cybersecurity Authority controls. Health insurance and GOSI are provided; base on-site work in our Riyadh office.

Qualifications

• Minimum qualification: a bachelor's degree, or equivalent work experience.
• 3+ years in cybersecurity, for example security operations, vulnerability management or application security.
• Good knowledge of web application and cloud security, including OWASP Top 10.
• Knowledge of the National Cybersecurity Authority's controls is an advantage.

Responsibilities

• Monitor ARK47 Studio's app, APIs and cloud systems for security threats, and handle any incident from detection to recovery.
• Scan the code, libraries and cloud settings for vulnerabilities and track fixes until closed.
• Run security tests on the app and its APIs before major releases.
• Review access to production systems and credentials, minimising access to what is needed.
• Prepare the security incident response plan and report risks monthly.

Skills

Security operations

Vulnerability management

Application security

Web security

OWASP Top 10

National Cybersecurity Authority

Education

Bachelor's degree

Job description

About ARK47 Studio

ARK47 Studio is a Saudi AI app, available on the App Store and Google Play, that builds business systems from a plain-language description: for example HR, bookings, an online store or a sales board. It drafts a plan with the business owner first, then builds the screens, data and access permissions. We are a Riyadh team bringing it to businesses in the Kingdom and beyond.

To get to know our work, we recommend downloading ARK47 Studio from the App Store or Google Play via our careers page: careers.apexops.sa

What you will do

• Monitor ARK47 Studio's app, APIs and cloud systems for security threats, and handle any incident from detection to recovery.
• Scan the code, the libraries it depends on and the cloud settings for vulnerabilities, and track each fix until it is closed.
• Run security tests on the app and its APIs before major releases.
• Review access to production systems, access keys and credentials, and keep it to what each person needs.
• Prepare the security incident response plan, and report every month on risks found, fixed and still open.

What we need

• Minimum qualification: a bachelor's degree, or equivalent work experience.
• Based in Riyadh, or willing to relocate to Riyadh.
• 3+ years in cybersecurity, for example security operations, vulnerability management or application security.
• Good knowledge of web application and cloud security, for example the OWASP Top 10.
• Knowledge of the National Cybersecurity Authority's controls is an advantage.
• Arabic or English, spoken and written; having both is an advantage.

Pay and terms

• Total monthly salary SAR 15,000-22,000 (basic salary plus allowances), depending on experience.
• Full-time, on-site at our Riyadh office; working days, hours and annual leave per the Saudi Labour Law.
• Health insurance and GOSI registration as required by Saudi law.
• Employer: Apex Operations Company. Work location: Riyadh.

How we select

1. We aim to reply to every application within 7 days.
2. A 30-minute video call about the role and ARK47 Studio, in which we hear your view of the app and your questions.
3. For shortlisted candidates, a 30-minute threat-modelling exercise about ARK47 Studio, using a test account we provide.
4. Final interview in Riyadh. We inform every interviewed candidate of the result within 30 days of their interview.