Application & Vulnerability Management Analyst

ASMO is a groundbreaking joint venture between DHL and Saudi Aramco. Inheriting DHLs logistics excellence and Saudi Aramcos extensive supply chain ecosystem, we are here to set a new benchmark and redefine the procurement and supply chain landscape, enabling growth.

ASMO aims to be operational in 2025 and provide reliable end-to-end integrated procurement and supply chain services for companies across the industrial, energy, chemical, and petrochemical sectors. Our focus customers in the short term will be Saudi Aramco and its Affiliates. In the long term, all the industrial sectors within Saudi Arabia aim to reach the MENA region.

Objective:

The Application and Vulnerability Management Analyst is responsible for managing ASMOs application security and vulnerability management program. They assess application security risks, conduct vulnerability scanning and remediation, and ensure secure coding practices.

General Responsibilities:

• The role holder will have knowledge of the rules, procedures and in some cases, the principles and practices within the IT Security Operations discipline. They will be tasked with selectively extracting, verifying, and compiling objective and measurable data. In some instances, they may determine the course of action based on established principles and modify existing processes and methods. The role holder will work with the technical teams to ensure the security of applications and systems across all aspects. The role holder will perform vulnerability assessment of IT systems and ensure remediations of the identified vulnerabilities.
• Conduct application security assessments and penetration testing to identify vulnerabilities.
• Develop vulnerability assessment plan and procedure, perform vulnerability scanning across applications and systems.
• Review, Track and prioritize vulnerabilities and collaborate with development teams for timely remediation.
• Implement and maintain secure coding practices and guidelines.
• Provide guidance and support to development teams on application security best practices.
• Monitor and analyze security incidents related to applications and systems.
• Develop and maintain documentation related to application security and vulnerability management.
• Recommend training and development interventions for team members to build their capabilities.
• Contribute to the identification of opportunities for the continuous improvement of systems, processes and practices to increase productivity and operational efficiency.
• Implement all relevant IT Security Operations departments policies, processes, procedures and instructions so that work is carried out in a controlled and consistent manner.
• Contribute to the preparation of timely and accurate reports to meet departmental requirements, policies and standards.

Qualifications:

• Bachelors degree in computer science, information technology, or equivalent from a recognized and accredited university is required.
• Masters degree in computer science, information technology or equivalent from a recognized and accredited university is preferred.
• Certifications in application security (e.g., CSSLP, GIAC Secure Software Programmer) preferred.
• Demonstrated proficiency in oral and written English.
• 5 years&apos experience in the same Field.