Application Security Consultant (Saudi National)

About the role

We are looking for an Application Security Consultant with hands‑on experience in application security, penetration testing, and secure software development practices. The ideal candidate will help identify and mitigate security vulnerabilities across web and mobile applications throughout the development lifecycle.

Key responsibilities

• Conduct web and mobile application security assessments and penetration testing.
• Perform threat modeling to identify application security risks and attack vectors.
• Conduct source code reviews and identify security vulnerabilities.
• Implement and manage SAST/DAST security testing processes.
• Support Secure SDLC and DevSecOps practices across development teams.
• Analyze vulnerabilities and provide practical remediation recommendations.
• Prepare security assessment reports and communicate findings to technical stakeholders.

Required profile

• 2+ years of experience in application security.
• Strong knowledge of web and mobile application penetration testing.
• Solid understanding of Secure SDLC and DevSecOps methodologies.
• Hands‑on or strong working knowledge of threat modeling, SAST, and DAST.
• Strong analytical, vulnerability assessment, and reporting skills.
• Relevant certifications such as OSCP, GWAPT, eWPT, or CEH are a plus.

Required skills

• Web and mobile application penetration testing
• Threat modeling
• SAST (Static Application Security Testing)
• DAST (Dynamic Application Security Testing)
• Secure SDLC
• DevSecOps practices