Application Security Engineer

About the Role

Tatal is seeking an Application Security Engineer to ensure the security of applications prior to production deployment. This part-time role is based in Riyadh, Saudi Arabia, and involves integrating security measures throughout the development lifecycle in close collaboration with engineering teams.

Key Responsibilities

• Conduct security reviews of applications before their deployment to production environments.
• Perform SAST, DAST, dependency, and vulnerability scanning.
• Assess the security of authentication, authorization, Role-Based Access Control (RBAC), and APIs.
• Identify vulnerabilities based on the OWASP Top 10 and OWASP API Security Top 10 guidelines.
• Review secrets management, encryption practices, and sensitive data handling procedures.
• Perform security-focused code reviews, with a priority on critical components.
• Conduct or coordinate penetration testing activities in advance of major releases.
• Define security gates and checklists required for production releases.

Required Qualifications

• Proven experience in securing modern SaaS and web applications.
• Hands-on experience with SAST/DAST and dependency scanning tools.
• Strong understanding of authentication and authorization protocols, including OAuth , OIDC, and JWT.
• Solid knowledge of the OWASP Top 10 and API security best practices.
• Ability to collaborate effectively with development teams and clearly articulate security risks.

Desired Skills and Experience

• Experience integrating security into CI/CD pipelines.
• Relevant security certifications such as OSCP, OSWE, or GWAPT.

Work Environment

This position offers a part-time work arrangement within a collaborative environment, focusing on proactive security measures for applications.

Application Process

Candidates interested in this role are encouraged to apply.