Application Security Consultant

About the role

The Application Security Consultant will evaluate the security posture of web, mobile and enterprise applications used by government entities. The role focuses on identifying vulnerabilities, aligning solutions with Saudi cybersecurity regulations, and embedding security into the software development lifecycle.

Key responsibilities

• Perform application security assessments, architecture reviews and vulnerability analysis.
• Execute security testing using SAST, DAST and basic penetration testing tools.
• Map findings to NCA Essential Cybersecurity Controls, SAMA Cybersecurity Framework, PDPL and NDMO requirements.
• Support Secure SDLC (SSDLC) and DevSecOps practices, including CI/CD pipeline integration.
• Review and recommend security configurations in Azure and Azure DevOps environments.
• Prepare risk reports, remediation recommendations and present findings to technical and non‑technical stakeholders.

Required profile

• Bachelor’s degree in Cybersecurity, Computer Science or related field.
• 8+ years of experience in application security or cybersecurity consulting, preferably in regulated or government environments.
• Strong analytical, problem‑solving and documentation skills.
• Consulting mindset with ability to communicate effectively with diverse audiences.

Required skills

• Deep knowledge of OWASP Top 10 and application security principles.
• Hands‑on experience with SAST, DAST and penetration testing tools such as Burp Suite, Fortify and Snyk.
• Familiarity with Secure SDLC, DevSecOps and CI/CD pipelines.
• Experience with Azure cloud services and Azure DevOps pipelines.