Y-Axis Jobs Logo
Send us feedback
telephone  +91 7670 800 001
Log in Sign up Try Premium
Specialist - Asset Security Operations at Qiddiya Investment Company
Riyadh, Riyadh Region, Saudi Arabia -
Full Time

Start Date

Immediate

Expiry Date

05 Oct, 26

Salary

0.0

Posted On

07 Jul, 26

Experience

2 year(s) or above

Remote Job

Yes

Telecommute

Yes

Sponsor Visa

No

Skills

WAF, API Security, Vulnerability Remediation, SAST, DAST, ServiceNow, BeyondTrust PAM, Application Patching, Secure SDLC, Access Management, Certificate Lifecycle Management, Penetration Testing

Industry

Entertainment Providers

Description
Own the day-to-day security operations of business applications across Qiddiya's asset environments by managing application security controls, vulnerability remediation, secure configurations, access management, and patching. Act as the primary liaison with the Cybersecurity Team to coordinate penetration testing and code scanning activities, drive timely remediation of identified vulnerabilities, and ensure applications remain secure, compliant, and operational throughout their lifecycle Key Responsibilities Manage WAF/API security policies, rule tuning, and virtual patching (Cloudflare). Track and drive remediation of application vulnerabilities identified through penetration testing and SAST/DAST, ensuring SLA compliance via ServiceNow. Coordinate application and service account access provisioning through BeyondTrust PAM. Manage application patching, secure configurations, and dependency updates. Maintain application security baselines, including WAF, access controls, secrets, and certificates for new application go-lives. Manage application secrets and certificate lifecycle. Coordinate with the Cybersecurity Team on penetration testing, code scanning, and remediation activities. Monitor application security compliance and produce regular security reports. 2+ years of experience in cybersecurity, preferably in application or web security. Experience with WAF platforms, ITSM tools, and vulnerability remediation processes. Understanding of secure SDLC principles and the interpretation of penetration testing and SAST/DAST findings. Familiarity with application patching, access management, and security configuration best practices
Responsibilities
Manage day-to-day security operations for business applications, including WAF policies, vulnerability remediation, and access management. Coordinate with the Cybersecurity Team to handle penetration testing, code scanning, and security compliance reporting.