Senior Application Security Analyst

AIQU; Riyadh; On-site; SAR 180,000 - 300,000; Full time

Job summary

AIQU in Riyadh is seeking an experienced Cyber Security Analyst to join our client’s security team. You will perform secure code reviews and lead vulnerability remediation across enterprise applications to strengthen our SSDLC and DevSecOps initiatives.

The role requires a strong background in OWASP Top 10, SAST/DAST/SCA tooling, and the ability to communicate risk to stakeholders while guiding developers toward secure coding practices.

Qualifications

• Bachelor's degree in cybersecurity, CS, or IT.
• Minimum 5+ years in application security or secure coding.
• Strong knowledge of OWASP Top 10 and common vulnerabilities.
• Experience with SAST/DAST/SCA tools and remediation guidance.

Responsibilities

• Perform manual and automated secure code reviews for enterprise apps.
• Identify, analyze, and report security vulnerabilities in source code.
• Review findings from SAST, DAST, and SCA tools.
• Provide remediation recommendations and support secure coding practices.
• Validate vulnerability fixes and ensure security requirements.
• Conduct application security assessments and design reviews.
• Promote SSDLC and DevSecOps practices.
• Develop and maintain secure coding standards and review procedures.
• Prepare technical reports and communicate risks to stakeholders.

Skills

Secure code review

SAST

DAST

SCA

OWASP Top 10

SSDLC

DevSecOps

Vulnerability analysis

Stakeholder management

Security reporting

Education

Bachelor's degree in Cybersecurity

Tools

Checkmarx

OpenText

SAST tools

DAST tools

SCA tools

Job description

AIQU in Riyadh is seeking an experienced Cyber Security Analyst to join our client’s security team. You will perform secure code reviews and lead vulnerability remediation across enterprise applications to strengthen our SSDLC and DevSecOps initiatives.

The role requires a strong background in OWASP Top 10, SAST/DAST/SCA tooling, and the ability to communicate risk to stakeholders while guiding developers toward secure coding practices.