Assistant Manager – Application Security Architect

About the role

Al Hilal Bank is seeking an Assistant Manager to design, implement and maintain secure technology architectures across its digital platforms, applications, infrastructure and cloud environments. The role will embed security‑by‑design principles throughout the technology lifecycle and strengthen the bank’s cyber resilience.

Key responsibilities

• Develop and maintain security architecture standards, reference architectures and secure design patterns for applications, infrastructure, cloud services, APIs and digital platforms.
• Review solution designs and project initiatives to ensure compliance with security standards, regulatory requirements and industry best practices.
• Conduct threat‑modelling, architecture risk assessments and security design reviews during project initiation and change implementation.
• Support the Secure Software Development Lifecycle (SSDLC) by defining security requirements, secure coding standards and security checkpoints.
• Integrate security controls, automated testing and continuous monitoring into DevSecOps and CI/CD pipelines.
• Assess the security posture of web, mobile, API and cloud applications, and coordinate penetration testing and vulnerability assessments.
• Evaluate cloud‑native, micro‑service and containerised environments to ensure appropriate security configurations.
• Facilitate internal and external audits, regulatory assessments and incident investigations, providing evidence and remediation support.

Required profile

• Minimum 5 years of experience in cyber security, security architecture, application security or related fields, preferably in banking or a regulated industry.
• Bachelor’s degree in Information Security, Cybersecurity, Computer Science, Engineering or a related discipline.
• One or more recognised certifications such as CISSP, CSSLP, OSCP, CEH, CCSK or equivalent.

Required skills

• Security architecture (application, cloud, zero‑trust)
• Threat modelling methodologies
• Secure Software Development Lifecycle (SSDLC)
• DevSecOps practices and secure coding principles
• Web, mobile, API and cloud security
• Penetration testing and vulnerability management
• Identity and Access Management, authentication mechanisms
• Cryptography and container security
• Cyber security governance and technology risk management
• OWASP Top 10, MITRE ATT&CK framework