About the Job:
To execute the DevSecOps plan by embedding security into every phase of the software development lifecycle, ensuring secure, scalable, and efficient delivery of digital solutions.
Ready to apply for roles like this?
Unlock the company name and direct application link. Subscribers get instant access to fresh jobs across Dubai, Abu Dhabi and Riyadh, many with visa support.
Unlock employer & apply directly
Key Accountabilities:
-
DevSecOps Management
- Define and standardize DevSecOps frameworks to ensure consistent security integration across development and operations teams.
- Create policies, controls, and KPIs to measure DevSecOps maturity and effectiveness.
- Align DevSecOps initiatives with business and cybersecurity strategies for executive sponsorship and long-term sustainability.
- Drive adoption through planning, stakeholder engagement, and change management.
- Report high-level DevSecOps metrics, risks, and progress to enable informed decision-making.
- Proactively implement feedback loops with stakeholders to continuously refine practices and address emerging needs.
-
Integration Management
- Embed security controls and automated checks into CI/CD pipelines for early detection and remediation of vulnerabilities.
- Define secure coding standards and enforce them through automated tools and peer reviews.
- Conduct threat modeling, code analysis, and security assessments at each phase to proactively identify and mitigate risks.
- Integrate security checkpoints into agile ceremonies to ensure continuous validation.
-
Automation
- Implement DevSecOps tools to support code scanning, container security, and infrastructure validation.
- Integrate tools into development workflows to provide real-time feedback and enforce security policies.
- Standardize tool utilization across teams to ensure consistency, reduce operational overhead, and improve visibility.
- Automate security testing and compliance checks to accelerate delivery without compromising quality.
-
Risk & Compliance
- Identify risk and mitigation processes within DevSecOps pipelines for proactive threat management.
- Comply with internal policies and external regulations with automated validation and reporting.
- Maintain audit readiness by documenting controls, evidence, and remediation actions.
- Conduct regular compliance reviews and risk assessments to identify gaps and implement continuous improvement.
Skills Required:
- DevSecOps
- Secure SDLC
- CI/CD
- Cloud Security
- Risk Management
- Agile/DevOps
- Tools: Snyk, SonarQube, Aqua, HashiCorp
Education:
Bachelor’s degree in Computer Science, Computer Application, Information Technology, or a related field.
Location:
Jiddah, Makkah, Saudi Arabia
Work Conditions:
On-site
