We are looking for a skilled and proactive Cybersecurity Engineer to strengthen our organization's security posture and protect our enterprise IT infrastructure, retail systems, POS environments, e-commerce platforms, and cloud environments.
The successful candidate will be responsible for implementing and managing enterprise security solutions, including Next-Generation Firewalls (NGFW), Endpoint Detection and Response (EDR/XDR), Network Access Control (NAC), Web Application Firewalls (WAF), and SIEM platforms.
This role will also support compliance with Saudi National Cybersecurity Authority (NCA) requirements, PCI-DSS, ISO/IEC 27001, and other relevant cybersecurity standards.
Key Responsibilities:
- Network Security: Design, implement, and manage firewalls, network segmentation, VPNs, and secure connectivity across corporate offices, retail stores, warehouses, and data centers.
- Endpoint Security: Manage endpoint protection, EDR/XDR, malware prevention, and security hardening across servers, POS systems, laptops, and other enterprise devices.
- Network Access Control & Identity Security: Implement NAC solutions and enforce access controls, MFA, identity management, and privileged access management (PAM).
- Web & E-Commerce Security: Manage WAF solutions and protect customer-facing applications, APIs, and e-commerce platforms against cyber threats, DDoS attacks, and malicious traffic.
- Cloud Security: Implement and maintain security controls across AWS, Azure, and hybrid environments, including IAM, encryption, network security, logging, and cloud security posture monitoring.
- Security Monitoring & Incident Response: Monitor security events through SIEM platforms, investigate incidents, coordinate response activities, and implement corrective actions.
- Vulnerability Management: Conduct vulnerability assessments, coordinate penetration testing, manage remediation activities, and ensure timely security patching.
- Governance & Compliance: Support compliance with NCA cybersecurity requirements, ISO/IEC 27001, NIST frameworks, PCI-DSS, and internal security policies.
- Risk Management & Documentation: Conduct cybersecurity risk assessments, maintain security documentation, prepare compliance evidence, and report on vulnerabilities and security incidents.
- Cross-Functional Collaboration: Work closely with infrastructure, cloud, network, application, and DevOps teams to integrate security into enterprise operations and technology projects.
Requirements & Qualifications:
- Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, or a related discipline.
- 3–5 years of relevant experience in cybersecurity or information security.
- Hands-on experience with enterprise security technologies, particularly firewalls, NAC, WAF, endpoint security, EDR/XDR, and SIEM.
- Strong understanding of network security, routing, switching, VPNs, wireless security, and network segmentation.
- Practical knowledge of cloud security across AWS, Azure, or hybrid environments.
- Familiarity with IAM, MFA, PAM, vulnerability management, and incident response processes.
- Good understanding of the Saudi NCA Cybersecurity Framework and relevant cybersecurity regulatory requirements in KSA.
- Working knowledge of ISO/IEC 27001, NIST Cybersecurity Framework, and PCI-DSS.
- Strong analytical, troubleshooting, communication, and problem-solving skills.
Preferred Qualifications:
- Professional certifications such as Security+, CEH, CISSP, CISM, CCSP, ISO/IEC 27001 Lead Implementer, Fortinet certifications, or AWS Certified Security – Specialty.
- Experience securing retail environments, POS systems, and high-transaction e-commerce platforms.
- Experience working with Security Operations Center (SOC) teams and incident response functions.
