Application Security Manager

In this role, you will champion secure coding practices and integrate security requirements into all phases of the Software Development Life Cycle (SDLC). You will collaborate with development teams to embed security considerations in application design, development, and testing. Additionally, performing threat modeling, risk assessments, and security reviews at each stage of the SDLC will be crucial.

Responsibilities

• Champion secure coding practices and integrate security requirements into all phases of the Software Development Life Cycle (SDLC).
• Collaborate with development teams to embed security considerations in application design, development, and testing.
• Perform threat modeling, risk assessments, and security reviews at each stage of the SDLC.
• Develop and implement security testing strategies and frameworks, including SAST, DAST, and IAST.
• Provide expert guidance on secure coding standards, vulnerability remediation, and security best practices.
• Contribute to the establishment and maintenance of application security policies, standards, and guidelines.
• Monitor and analyze application security trends and emerging threats to proactively address potential risks.
• Champion a security-first culture within the development organization, fostering collaboration and knowledge sharing.

Qualifications

• Bachelor's degree in Computer Science, Information Security, or a related field.
• 8+ years of experience in Application Security.
• Extensive experience in application security and secure SDLC implementation.
• Deep understanding of application security vulnerabilities, threats, and attack vectors.
• Strong knowledge of web application architectures, technologies, and security frameworks (e.g., OWASP, SANS).
• Proficiency in secure coding practices and vulnerability remediation techniques.
• Excellent communication, collaboration, and presentation skills.
• Relevant certifications (e.g., OSCP, CEH, GWAPT, CSSLP) are highly desirable.

Location
Riyadh, Saudi Arabia