The median Application Security (AppSec) Engineer salary in Saudi Arabia is SAR27K/mo in 2026, with a typical range from SAR26K/mo to SAR28K/mo. Pay has moved +10.0% year-on-year. Riyadh currently leads city pay at SAR29K/mo. This is base salary for permanent employees. Contracting instead? See day rates for this role below.
What does An Application Security (AppSec) Engineer do?
An Application Security (AppSec) Engineer is responsible for embedding security into the software development lifecycle through code review, threat modelling, and automated security tooling in the CI/CD pipeline.
Day-to-day responsibilities
- Running static and dynamic application security testing
- Threat-modelling new features with engineering teams
- Triaging vulnerabilities from bug bounty and pen test reports
- Building security tooling into CI/CD pipelines
Low demand+15% SAST/DAST tooling+13% Threat modelling+12% Secure CI/CD pipeline design