OmniOps is a Riyadh-based technology solutions provider, serving organizations across Saudi Arabia and beyond. With offices in Jordan, Egypt, and Morocco, we specialize in empowering businesses to migrate and scale their AI technology infrastructure confidently, achieving a high level of maturity in their digital landscapes. Our comprehensive services and products guarantee seamless cloud migration, scalability, and management, ensuring optimal performance and consistent reliability for our valued partners.
Role OverviewWe're looking for an experienced, hands-on Senior Security Engineer to strengthen and advance security across our cloud, Kubernetes, infrastructure, and identity environments. You'll take ownership of designing and implementing security controls, developing threat detection capabilities, managing security incidents, and driving security improvements across engineering teams. You'll play a key role in ensuring our systems and infrastructure are secure, resilient, and compliant with industry standards.
What You'll Do
- Design, implement, and continuously improve security controls across AWS, GCP, and Azure environments, including IAM, organizational guardrails, network segmentation, logging, and WAF.
- Lead Kubernetes and container security initiatives, including RBAC, admission policies (OPA), runtime detection (Falco), network policies, image signing, and vulnerability scanning.
- Embed security into CI/CD pipelines by implementing code scanning, dependency and container image scanning, secrets detection, and software supply chain security controls.
- Design and implement Zero Trust identity and endpoint security solutions across Entra ID, Conditional Access, Intune, and Purview.
- Develop and optimize SIEM and EDR detection capabilities, automate security monitoring and incident triage, and lead incident response activities.
- Own vulnerability management processes, from identification and risk assessment to remediation and verification, working closely with engineering teams.
- Design and implement security measures for private infrastructure, including virtualization, firewalls, VPN access, and backup environments.
- Conduct threat modeling and security assessments for new systems and infrastructure, including AI and GPU workloads.
- Establish security guardrails for AI development tools and emerging technologies.
- Drive security compliance initiatives and translate technical controls into audit-ready evidence for ISO 27001, SOC 2, and relevant Saudi cybersecurity frameworks (NCA ECC, SAMA CSF, and Aramco SACS-210).
- Provide technical guidance and mentorship to other security engineers and collaborate with cross-functional teams to improve the organization's security posture.
What You Bring
- * 5+ years of experience in security engineering, cloud security, cybersecurity, or DevSecOps.
- Strong hands-on experience securing cloud environments, particularly AWS or GCP, with knowledge of multi-cloud security architectures.
- Advanced experience in Kubernetes and container security, including cluster hardening and runtime protection.
- Strong understanding of DevSecOps practices and integrating security controls into CI/CD pipelines.
- Proven experience with SIEM, EDR, detection engineering, threat monitoring, and incident response.
- Strong scripting and automation skills using Python, Go, or Bash.
- Hands-on experience with Infrastructure as Code tools, particularly Terraform.
- Strong networking and infrastructure security knowledge, including segmentation, firewalls, VPNs, DNS, and TLS.
- Experience with identity and access management, Zero Trust architecture, and endpoint security.
- Strong analytical, troubleshooting, and problem-solving skills.
- Ability to independently drive security initiatives and collaborate effectively with engineering and infrastructure teams.
- English proficiency required.
Nice To Have
- * Certifications such as CKS, CKA, or AWS Security Specialty.
- Experience securing AI, GPU, or high-performance computing infrastructure.
- Experience with air-gapped environments and secrets management solutions such as HashiCorp Vault.
- An offensive security background, including penetration testing and vulnerability assessment.
- Experience implementing and maintaining security compliance frameworks such as ISO 27001, SOC 2, NCA ECC, SAMA CSF, or Aramco SACS-210.
