Cyber Security Specialist

About the role

The Cyber Security Specialist will enhance the security posture of critical government systems by implementing, monitoring and improving cyber defence mechanisms. The role combines hands‑on threat detection, incident response and governance to protect sensitive data and infrastructure. Candidates outside Saudi Arabia are welcome if they meet the technical and regulatory requirements of government‑grade environments.

Key responsibilities

• Monitor SIEM, IDS/IPS, endpoint and network security tools for real‑time threat detection and perform log analysis, correlation and alert triage.
• Lead containment, eradication and recovery activities during cyber incidents and develop incident‑response playbooks aligned with government standards.
• Ensure compliance with Saudi government frameworks (NCA ECC, NCA CCC, NCA CSCC, SAMA CSF) and support risk, vulnerability and security audits.
• Implement hardening standards for servers, endpoints, cloud environments (Azure/AWS) and network devices; conduct secure code reviews and application security assessments.
• Manage and optimise security tools such as SIEM (Splunk/QRadar/ArcSight), EDR/XDR, DLP, PAM, WAF and vulnerability scanners; evaluate new technologies.
• Deliver cybersecurity awareness sessions, phishing simulations and behavioural security programmes for employees.

Required profile

• Bachelor’s degree in Cyber Security, Computer Science, Information Technology or a related field.
• Preferred certifications: CISSP, CISM, CEH, CompTIA Security+, GIAC (GCIH, GCIA), ISO 27001 Lead Auditor.
• 4–8 years of hands‑on cybersecurity experience, preferably in government, defence or critical infrastructure.
• Proven track record in incident response, SOC operations or security engineering.

Required skills

• SIEM platforms (Splunk, QRadar, ArcSight)
• IDS/IPS and endpoint protection solutions
• Network security tools and log analysis
• Incident response and digital forensics
• Security governance frameworks (NCA ECC, NCA CCC, NCA CSCC, SAMA CSF)
• Server and endpoint hardening
• Cloud security (Azure, AWS)
• Secure code review and application security assessments
• Vulnerability scanning and management
• Data Loss Prevention (DLP)
• Privileged Access Management (PAM)
• Web Application Firewall (WAF)
• Encryption and IAM
• Zero‑trust architecture principles