Staff Security Engineer

Delivery Hero Austria; Riyadh; On-site; SAR 150,000 - 200,000; Full time

Job summary

A dynamic opportunity exists for a highly skilled Staff Security Engineer at a leading company in Riyadh. The successful candidate will work on comprehensive security measures including application and cloud security, as well as conducting penetration tests. This role requires a strong foundation in security engineering with a focus on improving security protocols. If you're ready to make a significant impact, this position is for you.

Qualifications

• 8+ years of relevant professional experience in security engineering.
• Certification in OSCP or CDP is mandatory; OSCE and CDE are plus.
• Proven expertise in penetration testing for web and mobile applications.

Responsibilities

• Ensure implementation of secure coding standards and perform manual code reviews.
• Conduct penetration testing and submit detailed security assessment reports.
• Follow daily operations and prepare accurate reports to meet objectives.

Skills

Application Security

Penetration Testing

Cloud Security

Education

Bachelor's degree in a related field

Master's degree in a related field

Tools

Web Application Firewalls (WAF)

Job description

Job Description

We are looking for a highly talented Staff Security Engineer to join our team in Riyadh . If you are looking for a place where you can gain hands-on experience and create a direct impact, then this may be the place for you! As Staff Security Engineer, You'll work on :

Application Security :

Ensure Implementation of defined secure coding standards.

Perform manual code / architecture reviews.

Implement and embed security modules / engines in CI / CD pipelines.

Contribute with engineers to resolve identified security vulnerabilities.

Penetration Testing and Red Teaming :

Perform white / black box VAPTs for Web, Mobile apps, and on-prem / cloud infrastructure.

Perform advanced red teaming exercises.

Submit detailed security assessment reports, ensure and follow up on mitigation action plans.

Cloud Security :

Implement and maintain security tools as required.

Improve cloud infrastructure security to handle external and internal threats.

Improve security monitoring of cloud infrastructure.

Governance and Resilience :

Follow all relevant policies, procedures, and processes in order for the daily work to be carried out in a controlled and consistent manner.

Contribute to the identification of opportunities for continuous improvement of processes, practices, work processes, cost-effectiveness, and productivity enhancement.

Promote to other employees within the organization the implementation and adherence to policies, procedures, processes, and instructions.

Daily Operations :

Follow daily operations relating to the job to ensure work continuity.

Contribute to preparing timely and accurate reports that concern the line of work to meet the requirements, objectives, and standards.

Ensure the satisfaction of both internal and external customers by addressing their needs in a courteous and timely manner.

Qualifications

• 8+ years of relevant professional experience in security engineering.
• Bachelor's degree in a related field is required; a Master's degree is highly preferred.
• Certification in OSCP or CDP is mandatory. Certifications such as OSCE and CDE are considered a plus.
• Proven expertise in penetration testing for both web and mobile applications.
• Strong proficiency in application security and the ability to integrate security practices into the CI / CD pipeline.
• Comprehensive knowledge of cloud information security, including the capability to generate and monitor security alerts effectively.
• Familiarity with security infrastructure / operations tools and practices, such as Web Application Firewalls (WAF).
• Experience with cloud penetration testing is an advantage.