Own the day-to-day security operations of business applications across Qiddiya's asset environments by managing application security controls, vulnerability remediation, secure configurations, access management, and patching. Act as the primary liaison with the Cybersecurity Team to coordinate penetration testing and code scanning activities, drive timely remediation of identified vulnerabilities, and ensure applications remain secure, compliant, and operational throughout their lifecycle

Key Responsibilities

• Manage WAF/API security policies, rule tuning, and virtual patching (Cloudflare).
• Track and drive remediation of application vulnerabilities identified through penetration testing and SAST/DAST, ensuring SLA compliance via ServiceNow.
• Coordinate application and service account access provisioning through BeyondTrust PAM.
• Manage application patching, secure configurations, and dependency updates.
• Maintain applica...