Application Security Consultant Job

About the Role

Elm Company is seeking an Application Security Consultant to join its team in Riyadh, Saudi Arabia. This full-time position is central to strengthening the security posture of Elm's applications and digital solutions.

Role Purpose

The primary objective of this role is to perform comprehensive application security assessments and support the integration of security practices throughout the software development lifecycle. This involves identifying application vulnerabilities, conducting thorough code and design reviews, assessing APIs and integrations, and providing essential security guidance to development teams.

Key Responsibilities

The Application Security Consultant will be responsible for a range of activities designed to ensure the robust security of Elm's digital offerings:

• Conduct security assessments for applications and digital solutions, evaluating them against approved security requirements and standards, and documenting identified vulnerabilities, risks, and recommended remediation actions.
• Perform security-focused source code reviews to identify vulnerabilities and insecure coding practices, assessing code against secure coding standards and providing remediation guidance.
• Lead threat modeling for new and existing applications and services, identifying potential attack scenarios, threats, and security control gaps, and recommending appropriate security controls.
• Manage application-layer vulnerabilities by identifying, analyzing, and assessing them, coordinating remediation activities with development teams, and validating fixes while monitoring outstanding findings.
• Assess APIs, microservices, and third-party integrations for cybersecurity risks, evaluating authentication, authorization, data protection, and integration controls, and recommending security improvements.
• Provide security guidance to development and engineering teams throughout the development lifecycle, supporting the application of secure design and development practices, and recommending security controls appropriate to solution risks and requirements.
• Develop and maintain application security standards, guidelines, and technical requirements, supporting alignment with secure software development practices and applicable cybersecurity standards, and evaluating emerging security practices.
• Support secure coding awareness and technical security training for developers, developing security guidance and knowledge materials, and promoting secure development practices across engineering teams.
• Adhere to all relevant departmental policies, processes, standard operating procedures, and instructions, ensuring compliance with safety, quality, environmental, and information security practices to maintain data integrity and confidentiality.

Qualifications

Candidates should possess the following academic and professional qualifications:

• Bachelor's degree in Cybersecurity, Computer Science, Software Engineering, Computer Engineering, or a related field.
• Professional certifications in Application Security, Secure Software Development, or related cybersecurity disciplines are considered an advantage.

Required Experience

The ideal candidate will demonstrate practical experience in relevant cybersecurity domains:

• 4–6 years of experience in application security, secure software development, security assessments, vulnerability management, or related cybersecurity domains.

Work Environment

This is a full-time position based at Elm Company's offices in Riyadh, Saudi Arabia. Salary details for this role will be discussed during the interview process.