Senior AppSec Operations Engineer

Qiddiya; Riyadh; On-site; SAR 120,000 - 210,000; Full time

Job summary

Qiddiya is seeking an Application Security Operations Specialist to own daily security operations for business applications. You will manage WAF/API security, remediation, configurations, access management, and patching, coordinating with the Cybersecurity Team on pentesting and code scanning.

Ensure secure, compliant operation throughout the lifecycle of applications. Ideal candidates have 2+ years in cybersecurity, with hands-on experience in WAF platforms, vulnerability remediation, and

Qualifications

• 2+ years of experience in cybersecurity, preferably in application or web security.
• Experience with WAF platforms and vulnerability remediation processes.
• Understanding of secure SDLC and interpretation of security findings.
• Familiarity with application patching, access management and security configurations.

Responsibilities

• Own day-to-day security operations of applications across asset environments.
• Manage application security controls, remediation, configurations, access and patching.
• Coordinate penetration testing and code scanning activities with Cybersecurity Team.
• Drive timely remediation to ensure secure, compliant operations.
• Produce regular security reports and maintain security baselines.

Skills

WAF and API security

Vulnerability remediation

Secure configurations

Access management

Patch management

Penetration testing coordination

Code scanning (SAST/DAST)

Cloudflare (WAF)

ITSM tools (ServiceNow)

PAM (BeyondTrust)

Tools

BeyondTrust PAM

ServiceNow

SAST/DAST tooling

Job description

Qiddiya is seeking an Application Security Operations Specialist to own daily security operations for business applications. You will manage WAF/API security, remediation, configurations, access management, and patching, coordinating with the Cybersecurity Team on pentesting and code scanning.

Ensure secure, compliant operation throughout the lifecycle of applications. Ideal candidates have 2+ years in cybersecurity, with hands-on experience in WAF platforms, vulnerability remediation, and