Cyber Security Specialist (IT Security)

About the role

ESOM Holding is looking for an experienced IT Security Specialist to protect its digital assets, technology infrastructure, applications and information systems. The role blends hands‑on security assessments, penetration testing, governance, risk management and service management within an ITIL‑aligned environment, ensuring compliance with Saudi cybersecurity regulations.

Key responsibilities

• Conduct vulnerability assessments and penetration testing across networks, infrastructure, wireless systems, applications and cloud environments.
• Perform static and dynamic application security testing (SAST and DAST) and deliver remediation recommendations.
• Develop and maintain security policies, procedures, risk registers, standards and compliance documentation.
• Support alignment with Saudi frameworks (NCA ECC, CSCC) and coordinate internal and external audits.
• Review system and network architectures, monitor emerging threats, assess third‑party security risks and promote secure‑by‑design practices.
• Manage security incidents, conduct root‑cause investigations, maintain service continuity controls, update security records, KPIs and CMDB in an ITIL context.

Required profile

• Bachelor’s degree in Cybersecurity, Computer Science, IT or related field.
• Minimum 5 years of dedicated experience in infrastructure security, application security testing, penetration testing or cyber governance.
• Hands‑on experience with tools such as Nessus, Burp Suite, Metasploit, Wireshark or Acunetix.
• Strong understanding of network protocols, firewalls, identity and access management, encryption standards and secure coding practices.
• Knowledge of Saudi cybersecurity compliance frameworks (NCA ECC, CSCC) and ITIL service management.
• Professional proficiency in Arabic and English.

Required skills

• Nessus
• Burp Suite
• Metasploit
• Wireshark
• Acunetix
• Static Application Security Testing (SAST)
• Dynamic Application Security Testing (DAST)
• Network protocol analysis
• Firewall configuration
• Identity and Access Management (IAM)
• Encryption standards
• Secure coding practices
• ITIL service management