وظيفة مهندس أمن سيبراني (أمن تطبيقات الويب) شاغرة لدى APTWatch في الرياض

We’re Hiring: Cybersecurity Engineer - Web Application Security

APTWatch is looking for a Cybersecurity Engineer with a strong focus on Web Application Security to join our growing technical team.

The role will focus on identifying, assessing, and mitigating security vulnerabilities across modern web applications, APIs, and supporting infrastructure.

Key Responsibilities

* Perform web application and API security assessments.

* Conduct vulnerability assessments and penetration testing.

* Identify and validate vulnerabilities based on OWASP Top 10 and OWASP API Security Top 10.

* Review authentication, authorization, session management, and access-control mechanisms.

* Test for common vulnerabilities such as XSS, SQL/NoSQL Injection, SSRF, IDOR, CSRF, and insecure file handling.

* Perform security reviews of REST APIs and modern web architectures.

* Work with developers to reproduce, prioritize, and remediate security findings.

* Support secure coding practices and security testing throughout the SDLC.

* Prepare clear technical vulnerability reports with evidence, risk assessment, and remediation recommendations.

Requirements

* Bachelor’s degree in Cybersecurity, Computer Science, Software Engineering, or a related field.

* Hands-on experience in web application security and penetration testing.

* Strong understanding of HTTP/HTTPS, REST APIs, authentication protocols, and web security fundamentals.

* Practical experience with tools such as Burp Suite, OWASP ZAP, Nmap, and Postman.

* Familiarity with Linux and scripting using Python, Bash, or similar languages.

* Understanding of modern application architectures, including frontend/backend applications, APIs, databases, containers, and cloud environments.

* Ability to clearly document and communicate technical security findings.

Preferred Qualifications

* Experience with SAST, DAST, SCA, and DevSecOps practices.

* Familiarity with CI/CD security integration and container security.

* Certifications such as OSCP, OSWE, eWPT, BSCP, or equivalent are a plus.

Location: Riyadh, Saudi Arabia

Employment Type: Full-time

Interested candidates may submit their CV to:

hr@apt-watch.com