Senior Specialist - Asset Security Operations

About the role

We are looking for a Senior Specialist to own day‑to‑day security operations for business applications across Qiddiya’s asset environments. You will manage security controls, vulnerability remediation, secure configurations, access management and patching while acting as the primary liaison with the Cybersecurity Team.

Key responsibilities

• Manage WAF/API security policies, rule tuning and virtual patching using Cloudflare.
• Track and drive remediation of application vulnerabilities identified through penetration testing and SAST/DAST, ensuring SLA compliance via ServiceNow.
• Coordinate application and service‑account access provisioning through BeyondTrust PAM.
• Oversee application patching, secure configurations and dependency updates.
• Maintain security baselines for new application go‑lives, including WAF settings, access controls, secrets and certificates.
• Manage the lifecycle of application secrets and certificates.
• Collaborate with the Cybersecurity Team on penetration testing, code scanning and remediation activities.
• Monitor application security compliance and produce regular security reports.

Required profile

• Minimum 2 years of experience in cybersecurity, preferably in application or web security.
• Strong understanding of secure SDLC principles and the ability to interpret penetration‑testing, SAST and DAST findings.
• Experience with vulnerability remediation processes and ITSM tools.

Required skills

• Cloudflare WAF platform
• ServiceNow (ITSM)
• BeyondTrust Privileged Access Management
• SAST and DAST tools
• Penetration testing coordination
• Application patching and secure configuration
• Secrets and certificate lifecycle management