Application Security Consultant

About the role

The Application Security Consultant will evaluate the security of web, mobile and enterprise applications used by government entities and provide actionable recommendations. The role focuses on aligning applications with Saudi cybersecurity regulations and supporting secure development practices in Azure environments.

Key responsibilities

• Assess security of applications, identify vulnerabilities, misconfigurations and architectural risks.
• Conduct security testing including SAST, DAST and basic penetration testing.
• Perform risk assessments, classify findings and validate remediation.
• Evaluate compliance with NCA Essential Cybersecurity Controls, SAMA Cybersecurity Framework, PDPL and NDMO requirements.
• Promote Secure SDLC (SSDLC) and integrate security into CI/CD pipelines (DevSecOps) within Azure DevOps.
• Prepare detailed assessment reports, remediation roadmaps and present findings to technical and non‑technical stakeholders.

Required profile

• Bachelor’s degree in Cybersecurity, Computer Science or related field.
• 8+ years of experience in application security or cybersecurity consulting, preferably in government or regulated environments.
• Strong analytical, problem‑solving and documentation skills.
• Ability to communicate complex security concepts to diverse audiences.
• Consulting mindset with a focus on advisory and remediation support.

Required skills

• Deep knowledge of OWASP Top 10 and application security principles.
• Experience with SAST and DAST tools such as Burp Suite, Fortify and Snyk.
• Familiarity with Secure SDLC and DevSecOps practices.
• Hands‑on experience with Azure cloud services and Azure DevOps pipelines.