Senior App Security Operations Lead

Qiddiya Investment Company; Riyadh; On-site; SAR 150,000 - 230,000; Full time

Job summary

Qiddiya Investment Company is seeking a cybersecurity professional to own day-to-day security operations of business applications across asset environments. You will manage application security controls, remediation, secure configurations, access management, and patching throughout the lifecycle.

You will coordinate penetration testing and code scanning with the Cybersecurity Team, drive timely remediation of vulnerabilities, and ensure apps remain secure, compliant, and operational.

Qualifications

• 2+ years of experience in cybersecurity, preferably in application or web security.
• Experience with WAF platforms, ITSM tools, and vulnerability remediation processes.
• Understanding of secure SDLC principles and the interpretation of penetration testing and SAST/DAST findings.
• Familiarity with application patching, access management, and security configuration best practices.

Responsibilities

• Manage WAF/API security policies, rule tuning, and virtual patching (Cloudflare).
• Track and drive remediation of application vulnerabilities identified through penetration testing and SAST/DAST, ensuring SLA compliance via ServiceNow.
• Coordinate application and service account access provisioning through BeyondTrust PAM.
• Manage application patching, secure configurations, and dependency updates.
• Maintain application security baselines, including WAF, access controls, secrets, and certificates for new application go-lives.
• Manage application secrets and certificate lifecycle.
• Coordinate with the Cybersecurity Team on penetration testing, code scanning, and remediation activities.
• Monitor application security compliance and produce regular security reports.

Skills

WAF platforms

ITSM tools

Vulnerability remediation

Penetration testing

Code scanning

Secure SDLC

Access management

PAM (BeyondTrust)

Job description

Qiddiya Investment Company is seeking a cybersecurity professional to own day-to-day security operations of business applications across asset environments. You will manage application security controls, remediation, secure configurations, access management, and patching throughout the lifecycle.

You will coordinate penetration testing and code scanning with the Cybersecurity Team, drive timely remediation of vulnerabilities, and ensure apps remain secure, compliant, and operational.