Manager - Vulnerability Management

The role is responsible for embedding security into the software development lifecycle (SDLC) and ensuring the security of cloud-native and microservices-based applications, as well as managing and optimizing the Data Security Assessment Tool (D-SAT). This position involves proactively identifying, assessing, and mitigating security risks in applications while implementing industry-leading security practices to safeguard digital assets.

Responsibilities:

• Implement Secure-by-Design and Zero Trust Architecture (ZTA) principles in agile and DevSecOps environments.
• Conduct automated and manual threat modeling for API security, cloud-native applications, and AI models.
• Lead the identification and classification of vulnerabilities, assess their risk levels, and collaborate with relevant stakeholders to prioritize remediation efforts.
• Oversee the remediation process, ensuring timely resolution of high-priority vulnerabilities to minimize security risks to the organization.
• Perform static (SAST), dynamic (DAST), interactive (IAST), and software composition analysis (SCA) to identify security flaws.
• Assess and mitigate risks in AI/ML-based applications, including adversarial attacks and data poisoning threats.
• Implement cloud security controls across Google Cloud and Oracle Cloud, ensuring compliance with relevant standards.
• Integrate security testing tools into CI/CD pipelines.
• Collaborate with red and blue teams to conduct penetration testing and incident response.
• Develop and present regular reports on vulnerability management metrics, progress on remediation, and the overall security posture of the organization.
• Ensure compliance with ISO 27001, PCI DSS, and Saudi Arabian Cybersecurity Standards.
• Enforce, incorporate, and comply with all necessary controls and related information security policies, procedures, practices, training, reporting, and personal due diligence.

Qualifications:

• Preferred Qualifications: A tertiary level qualification from a recognized institution in Computer Science, Information Security, or a related field.
• Experience: 3 to 5 years of equivalent experience in information security or vulnerability management, with demonstrated competencies and experience.
• Proven experience managing security tools like D-SAT, vulnerability scanners, or similar platforms.
• Strong understanding of risk management frameworks and vulnerability assessment methodologies.

Technical Competencies:

• Vulnerability scanning tools
• Knowledge of security threats

Behavioral Competencies:

• Communication
• Problem-solving
• Decision-making
• Attention to detail

Work Conditions: On-site, Full-time
Location: Riyadh, Saudi Arabia
Language Requirements: Not specified.