Jobgether تعلن عن وظيفة أمن التطبيقات - اكتشاف الثغرات في السعودية
Application Security - Vulnerability Discovery
🏢 Jobgether
تفاصيل الوظيفة
فرصة للعمل عبر Jobgether لحساب شركة شريكة في مجال أمن التطبيقات - اكتشاف الثغرات، مقرها السعودية.
المهام والمسؤوليات
- تصنيف الثغرات الأمنية والتحقق منها وتحديد أولوياتها وإدارتها، سواء من المراجعات اليدوية أو أدوات الأمان الآلية أو برامج مكافآت اكتشاف الثغرات أو منصات الأمان المدعومة بالذكاء الاصطناعي.
- التعاون مع فرق هندسة البرمجيات والمنتجات لدفع جهود المعالجة، وتقديم إرشادات أمنية قابلة للتنفيذ، وضمان حل المشكلات في الوقت المناسب بناءً على المخاطر ودرجة الخطورة.
- مراجعة طلبات السحب (Pull Requests) الخاصة بالأمان، وتغييرات الكود المصدري، وسير عمل التطوير لتحديد الثغرات والتوصية بأساليب التنفيذ الآمنة.
- تحليل النتائج الناتجة عن أدوات الأمان المدعومة بالذكاء الاصطناعي ومنصات الأتمتة، وتقليل النتائج الإيجابية الخاطئة، وتحسين سير عمل اكتشاف الثغرات.
- المشاركة في أنشطة الاستجابة للحوادث الأمنية والتحقيقات وتحليل الأسباب الجذرية المتعلقة بقضايا أمن التطبيقات.
- دعم وتعزيز ممارسات دورة حياة تطوير البرمجيات الآمنة (Secure SDLC) عبر المؤسسات الهندسية.
- تطوير أدوات الأمان والأتمتة وسير العمل لتحسين اكتشاف الثغرات والتغطية الأمنية والكفاءة التشغيلية.
- تكوين منصات فحص الثغرات وتحسينها وصيانتها، بما في ذلك السياسات والجداول الزمنية وعمليات إعداد التقارير.
- تتبع تقدم المعالجة والمقاييس الأمنية ومبادرات تقليل المخاطر مع توفير الرؤية لأصحاب المصلحة.
- التعاون مع فرق هندسة الأمان والتطوير لتحسين استراتيجيات اكتشاف الثغرات وتحديد الأولويات والمعالجة.
- إنشاء وثائق أمنية وأفضل الممارسات وموارد تعليمية لتعزيز ممارسات البرمجة الآمنة عبر الفرق.
- المشاركة في نظام المناوبة (on-call rotation) لدعم فرز الثغرات ومراجعات الكود وطلبات أمن التطبيقات.
الشروط والمتطلبات
- خبرة لا تقل عن 3 سنوات في هندسة أمن التطبيقات أو دور أمني ذي صلة.
- التوفر للعمل حتى الساعة 11:00 صباحاً بتوقيت المحيط الهادئ (PST).
- فهم قوي لمبادئ أمن التطبيقات وإدارة الثغرات وممارسات تطوير البرمجيات الآمنة.
- خبرة في بناء وتوسيع نطاق برامج دورة حياة التطوير الآمنة (SDLC).
- خبرة عملية في التعامل مع تقارير الثغرات ونتائج مكافآت اكتشاف الثغرات والتقييمات الأمنية.
- خبرة في التعاون مع فرق الهندسة والمنتجات لدفع التحسينات الأمنية ومبادرات المعالجة.
- خبرة في فرز الثغرات من أدوات SAST وDAST وSCA وفحص التبعيات واختبار الاختراق وما شابه ذلك.
- معرفة قوية بمخاطر أمن التطبيقات الشائعة، بما في ذلك OWASP Top 10 وأمن واجهات API والمصادقة والترخيص وإدارة الأسرار والتشفير.
- خبرة في مراجعة الكود المصدري وتحديد الثغرات عبر لغات البرمجة والأطر الحديثة.
- الإلمام بأدوات الأمان مثل SAST وDAST وSCA وفحص البنية التحتية كرمز (Infrastructure-as-Code) واكتشاف الأسرار ومنصات إدارة الثغرات.
- خبرة في العمل مع البنى السحابية الأصلية والبيئات السحابية العامة، ويفضل AWS.
- القدرة على تقييم النتائج الأمنية وتحديد المخاطر الهامة وتوصيات المعالجة الواضحة.
- مهارات قوية في التواصل والتعاون وبناء العلاقات.
- الإلمام بسير عمل التطوير المدعوم بالذكاء الاصطناعي أو أدوات الأمان بالذكاء الاصطناعي أو تطبيقات الأمان المستندة إلى LLM (ميزة إضافية).
المزايا
- فرصة عمل عن بُعد بالكامل.
- فرصة للمساهمة في مبادرات أمن التطبيقات واسعة النطاق.
- بيئة عمل مرنة تدعم التعاون مع فرق موزعة.
- القدرة على العمل على تحديات أمنية حديثة تشمل السحابة والأتمتة وتقنيات الأمان بالذكاء الاصطناعي.
- فرصة للتأثير على ممارسات التطوير الآمن عبر المؤسسات الهندسية.
- التعرض لعمليات إدارة ثغرات متقدمة وأدوات أمان.
- فرص نمو مهني ضمن بيئة تركز على التكنولوجيا.
- فرصة للتعاون مع محترفين ذوي خبرة في الأمان والهندسة والمنتجات.
- حزمة تعويضات تنافسية بناءً على الخبرة والكفاءة.
عرض النص الأصلي للإعلان
This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for an Application Security - Vulnerability Discovery based in Saudi Arabia.
This role focuses on strengthening application security by identifying, analyzing, and reducing vulnerabilities across modern software environments.
You will collaborate with engineering and product teams to improve security practices throughout the software development lifecycle.
The position combines vulnerability management, secure coding expertise, automation, and security research to protect critical applications.
You will play a key role in validating security findings, guiding remediation efforts, and improving security processes at scale.
The ideal candidate will bring strong technical skills, a proactive mindset, and the ability to partner effectively with development teams.
This is an opportunity to contribute to impactful security initiatives while helping build safer, more resilient products.
Accountabilities
The Application Security Engineer will be responsible for identifying security risks, improving vulnerability management processes, and partnering with engineering teams to implement secure development practices.
The ideal candidate is an experienced application security professional with strong technical expertise, excellent collaboration skills, and a proven ability to improve security outcomes across software development environments.
We use an AI-powered matching process to ensure your application is reviewed quickly, objectively, and fairly against the role's core requirements. Our system identifies the top-fitting candidates, and this shortlist is then shared directly with the hiring company. The final decision and next steps (interviews, assessments) are managed by their internal team.
We appreciate your interest and wish you the best!
Why Apply Through Jobgether?
Data Privacy Notice: By submitting your application, you acknowledge that Jobgether will process your personal data to evaluate your candidacy and share relevant information with the hiring employer. This processing is based on legitimate interest and pre-contractual measures under applicable data protection laws (including GDPR). You may exercise your rights (access, rectification, erasure, objection) at any time.
We may use artificial intelligence (AI) tools to support parts of the hiring process, such as reviewing applications, analyzing resumes, or assessing responses and identifying potential inconsistencies or verification signals in application materials based on available information. These tools assist our recruitment team but do not replace human judgment. Final hiring decisions are ultimately made by humans. If you would like more information about how your data is processed, please contact us.
This role focuses on strengthening application security by identifying, analyzing, and reducing vulnerabilities across modern software environments.
You will collaborate with engineering and product teams to improve security practices throughout the software development lifecycle.
The position combines vulnerability management, secure coding expertise, automation, and security research to protect critical applications.
You will play a key role in validating security findings, guiding remediation efforts, and improving security processes at scale.
The ideal candidate will bring strong technical skills, a proactive mindset, and the ability to partner effectively with development teams.
This is an opportunity to contribute to impactful security initiatives while helping build safer, more resilient products.
Accountabilities
The Application Security Engineer will be responsible for identifying security risks, improving vulnerability management processes, and partnering with engineering teams to implement secure development practices.
- Triage, validate, prioritize, and manage security vulnerabilities discovered through manual reviews, automated security tools, bug bounty programs, and AI-assisted security platforms.
- Partner with software engineering and product teams to drive remediation efforts, provide actionable security guidance, and ensure timely resolution of findings based on risk and severity.
- Review security-related pull requests, source code changes, and development workflows to identify vulnerabilities and recommend secure implementation approaches.
- Analyze findings generated by AI-powered security tools and automation platforms, reduce false positives, and improve vulnerability detection workflows.
- Participate in security incident response activities, investigations, and root cause analysis related to application security issues.
- Support and enhance secure software development lifecycle (SDLC) practices across engineering organizations.
- Develop security tooling, automation, and workflows to improve vulnerability detection, security coverage, and operational efficiency.
- Configure, optimize, and maintain vulnerability scanning platforms, including policies, schedules, and reporting processes.
- Track remediation progress, security metrics, and risk reduction initiatives while providing visibility to stakeholders.
- Collaborate with security architecture and development teams to improve vulnerability discovery, prioritization, and remediation strategies.
- Create security documentation, best practices, and educational resources to promote secure coding practices across teams.
- Participate in an on-call rotation to support security triage, code reviews, and application security requests.
The ideal candidate is an experienced application security professional with strong technical expertise, excellent collaboration skills, and a proven ability to improve security outcomes across software development environments.
- 3+ years of experience in application security engineering or a related security role.
- Availability to work until 11:00 AM Pacific Standard Time (PST).
- Strong understanding of application security principles, vulnerability management, and secure software development practices.
- Experience building and scaling Secure Development Lifecycle (SDLC) programs.
- Hands-on experience handling vulnerability reports, bug bounty findings, and security assessments.
- Experience partnering with engineering and product teams to drive security improvements and remediation initiatives.
- Experience triaging and prioritizing vulnerabilities from SAST, DAST, SCA, dependency scanning, penetration testing, and similar security assessments.
- Strong knowledge of common application security risks, including OWASP Top 10, API security, authentication, authorization, secrets management, and cryptography.
- Experience reviewing source code and identifying vulnerabilities across modern programming languages and frameworks.
- Familiarity with security tools such as SAST, DAST, SCA, infrastructure-as-code scanning, secrets detection, and vulnerability management platforms.
- Experience working with cloud-native architectures and public cloud environments, preferably AWS.
- Ability to evaluate security findings, identify meaningful risks, and communicate clear remediation recommendations.
- Strong communication, collaboration, and relationship-building skills.
- Familiarity with AI-assisted development workflows, AI-powered security tools, or LLM-based security applications is a plus.
- Fully remote work opportunity.
- Opportunity to contribute to large-scale application security initiatives.
- Flexible work environment supporting collaboration with distributed teams.
- Ability to work on modern security challenges involving cloud, automation, and AI-powered security technologies.
- Opportunity to influence secure development practices across engineering organizations.
- Exposure to advanced vulnerability management processes and security tooling.
- Professional growth opportunities within a technology-focused environment.
- Opportunity to collaborate with experienced security, engineering, and product professionals.
- Competitive compensation package based on experience and expertise.
We use an AI-powered matching process to ensure your application is reviewed quickly, objectively, and fairly against the role's core requirements. Our system identifies the top-fitting candidates, and this shortlist is then shared directly with the hiring company. The final decision and next steps (interviews, assessments) are managed by their internal team.
We appreciate your interest and wish you the best!
Why Apply Through Jobgether?
Data Privacy Notice: By submitting your application, you acknowledge that Jobgether will process your personal data to evaluate your candidacy and share relevant information with the hiring employer. This processing is based on legitimate interest and pre-contractual measures under applicable data protection laws (including GDPR). You may exercise your rights (access, rectification, erasure, objection) at any time.
We may use artificial intelligence (AI) tools to support parts of the hiring process, such as reviewing applications, analyzing resumes, or assessing responses and identifying potential inconsistencies or verification signals in application materials based on available information. These tools assist our recruitment team but do not replace human judgment. Final hiring decisions are ultimately made by humans. If you would like more information about how your data is processed, please contact us.
المصدر: LinkedIn - أُضيفت للموقع في 17 يوليو 2026