Cyber Security Analyst

Position Overview

We are seeking a highly skilled and experienced Cyber Security Analyst to join a prominent organization based in Riyadh, Saudi Arabia. This is a 12-month contract position with the potential for extension, offering a unique opportunity to contribute to the cybersecurity framework of a leading enterprise. The ideal candidate will play a pivotal role in safeguarding applications through rigorous security assessments, vulnerability analysis, and the implementation of robust security measures. Your expertise will be instrumental in fortifying our digital assets against evolving cyber threats while fostering a culture of security awareness and best practices.

Key Responsibilities

The Cyber Security Analyst will be responsible for a wide range of critical tasks, including:

• Secure Code Reviews: Conduct comprehensive manual and automated secure code reviews for enterprise applications to identify potential security vulnerabilities and weaknesses in the source code.
• Vulnerability Identification and Analysis: Detect, analyze, and document security vulnerabilities in application source code, ensuring that risks are accurately assessed and prioritized for remediation.
• Tool-Based Security Assessments: Review and interpret findings from Static Application Security Testing (SAST), Dynamic Application Security Testing (DAST), and Software Composition Analysis (SCA) tools to identify security gaps and recommend corrective actions.
• Remediation Support: Provide actionable remediation recommendations to development teams and collaborate closely to implement secure coding practices, ensuring that applications meet stringent security requirements.
• Validation and Compliance: Validate the effectiveness of vulnerability fixes and conduct thorough application security assessments and security design reviews to ensure adherence to industry standards and regulatory compliance.
• DevSecOps Integration: Champion Secure Software Development Lifecycle (SSDLC) best practices and support DevSecOps initiatives to embed security into every phase of the software development process.
• Policy Development: Develop, maintain, and enforce secure coding standards, guidelines, and review procedures to establish a robust security framework across all development projects.
• Stakeholder Communication: Prepare detailed technical reports and present security risks, findings, and recommendations to stakeholders, ensuring clear and concise communication of complex security concepts.

Required Skills & Experience

To excel in this role, candidates must meet the following qualifications and possess the following competencies:

• Educational Background: A Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, or a closely related field is required.
• Professional Experience: Minimum of five years of hands-on experience in Application Security, Secure Code Review, or Software Development, with a proven track record of identifying and mitigating security risks.
• Security Expertise: In-depth knowledge of the OWASP Top 10 and common application security vulnerabilities, including but not limited to injection flaws, cross-site scripting (XSS), and insecure deserialization.
• Tool Proficiency: Extensive experience with Secure Code Review, Application Security Testing, and Vulnerability Analysis, along with hands-on expertise in SAST, DAST, and SCA tools.
• Security Platforms: Familiarity with industry-leading security assessment platforms such as Checkmarx, OpenText, or equivalent solutions.
• SSDLC Knowledge: A strong understanding of Secure Software Development Lifecycle (SSDLC) principles and the ability to integrate security best practices into development workflows.
• Programming Skills: Proficiency in one or more programming languages, including Java, .NET, Python, JavaScript, or PHP, with the ability to analyze and review code effectively.
• Soft Skills: Exceptional analytical abilities, problem-solving skills, and the capacity to manage stakeholders effectively, ensuring alignment and collaboration across teams.

This role offers a dynamic and challenging environment where your expertise will directly contribute to the organization’s cybersecurity resilience. If you are passionate about application security and eager to make a significant impact, we invite you to apply and join our team of dedicated professionals.