Application Security Engineer
Security · Riyadh, Saudi Arabia (On-site) · Full-time · 4+ years · SAR 18,000 – 28,000 / month
Cortex Solutions is hiring an Application Security Engineer in Riyadh to embed security into how we design, build and deliver software. You will lead secure code reviews, penetration testing and DevSecOps, and help our projects meet NCA Essential Cybersecurity Controls and PDPL requirements.
Responsibilities
- Run threat modelling and security design reviews for new projects
- Perform secure code reviews and application penetration tests
- Integrate security scanning into CI/CD pipelines (DevSecOps)
- Track, prioritise and verify fixes for vulnerabilities
- Map project controls to NCA ECC and PDPL requirements and prepare evidence
- Train developers on secure coding practices
- Support incident response for application-level security events
Requirements
- 4+ years of experience in application security, penetration testing or secure development
- Strong knowledge of the OWASP Top 10 and OWASP API Security Top 10
- Hands-on experience with SAST, DAST and dependency scanning tools
- Ability to review code in at least one of TypeScript, Java or Python
- Experience testing web, mobile and API applications (Burp Suite or similar)
- Working knowledge of NCA ECC, NCA CCC and the Saudi PDPL
- Certifications such as OSCP, OSWE, GWAPT or CSSLP are a plus
Benefits
- Medical insurance for you and your family as per company policy
- Annual leave and public holidays in line with the Saudi Labour Law
- Annual training and certification budget
- Competitive salary with housing and transport allowances
- Sponsored security certification exams