Senior Specialist - Asset Security Operations

Qiddiya; Riyadh; On-site; SAR 120,000 - 210,000; Full time

Job summary

Qiddiya is seeking an Application Security Operations Specialist to own daily security operations for business applications. You will manage WAF/API security, remediation, configurations, access management, and patching, coordinating with the Cybersecurity Team on pentesting and code scanning.

Ensure secure, compliant operation throughout the lifecycle of applications. Ideal candidates have 2+ years in cybersecurity, with hands-on experience in WAF platforms, vulnerability remediation, and

Qualifications

• 2+ years of experience in cybersecurity, preferably in application or web security.
• Experience with WAF platforms and vulnerability remediation processes.
• Understanding of secure SDLC and interpretation of security findings.
• Familiarity with application patching, access management and security configurations.

Responsibilities

• Own day-to-day security operations of applications across asset environments.
• Manage application security controls, remediation, configurations, access and patching.
• Coordinate penetration testing and code scanning activities with Cybersecurity Team.
• Drive timely remediation to ensure secure, compliant operations.
• Produce regular security reports and maintain security baselines.

Skills

WAF and API security

Vulnerability remediation

Secure configurations

Access management

Patch management

Penetration testing coordination

Code scanning (SAST/DAST)

Cloudflare (WAF)

ITSM tools (ServiceNow)

PAM (BeyondTrust)

Tools

BeyondTrust PAM

ServiceNow

SAST/DAST tooling

Job description

Own the day-to-day security operations of business applications across Qiddiya's asset environments by managing application security controls, vulnerability remediation, secure configurations, access management, and patching. Act as the primary liaison with the Cybersecurity Team to coordinate penetration testing and code scanning activities, drive timely remediation of identified vulnerabilities, and ensure applications remain secure, compliant, and operational throughout their lifecycle

Key Responsibilities

• Manage WAF/API security policies, rule tuning, and virtual patching (Cloudflare).
• Track and drive remediation of application vulnerabilities identified through penetration testing and SAST/DAST, ensuring SLA compliance via ServiceNow.
• Coordinate application and service account access provisioning through BeyondTrust PAM.
• Manage application patching, secure configurations, and dependency updates.
• Maintain application security baselines, including WAF, access controls, secrets, and certificates for new application go-lives.
• Manage application secrets and certificate lifecycle.
• Coordinate with the Cybersecurity Team on penetration testing, code scanning, and remediation activities.
• Monitor application security compliance and produce regular security reports.

• 2+ years of experience in cybersecurity, preferably in application or web security.

• Experience with WAF platforms, ITSM tools, and vulnerability remediation processes.
• Understanding of secure SDLC principles and the interpretation of penetration testing and SAST/DAST findings.
• Familiarity with application patching, access management, and security configuration best practices