Senior Application Security Consultant

About the role

The Senior Application Security Consultant will evaluate the security of web, mobile and enterprise applications for government entities, ensuring alignment with Saudi cybersecurity regulations. The role involves performing assessments, guiding secure development practices, and delivering actionable recommendations.

Key responsibilities

• Assess security of applications, identify vulnerabilities, misconfigurations and architectural risks.
• Conduct security testing (SAST, DAST, basic penetration testing) and risk assessments.
• Map findings to NCA Essential Cybersecurity Controls, SAMA Cybersecurity Framework, PDPL and NDMO requirements.
• Promote Secure SDLC and integrate security into Azure DevOps CI/CD pipelines.
• Prepare detailed reports, remediation roadmaps and present findings to technical and non‑technical stakeholders.

Required profile

• Bachelor’s degree in Cybersecurity, Computer Science or related field.
• 8+ years of experience in application security or cybersecurity consulting.
• Strong analytical, problem‑solving and communication skills.
• Consulting mindset with ability to advise technical teams and senior management.

Required skills

• Deep knowledge of OWASP Top 10.
• Experience with SAST and DAST tools (e.g., Burp Suite, Fortify, Snyk).
• Familiarity with Secure SDLC and DevSecOps practices.
• Hands‑on experience with Azure cloud services and Azure DevOps pipelines.