Operations and Security Engineer

About the role

Arabic.AI is hiring an Operations and Security Engineer in Riyadh. You will monitor the platform around the clock, handle incidents and emergencies, and implement and maintain the security controls and architecture of the platform.

Key responsibilities

• Monitor the platform 24/7, respond to alerts, troubleshoot, fix issues and restore service, including emergencies outside office hours and client reports.
• Patch, harden components and run regular vulnerability reviews, keeping endpoint protection compatible.
• Implement and operate security controls: identity and access with MFA, RBAC and single sign-on, encryption, separated dev/test/production, signed and verified automation code, file-type whitelisting and mobile-device restrictions.
• Run security logging, audit logs and SIEM integration, protecting logs from tampering.
• Secure the APIs: gateway, OAuth 2.0 and OWASP API security.
• Own backups, business continuity and disaster recovery, and test them.
• Run incident response: immediate notification, an initial report within 24 hours, documented procedures with SLAs and escalation.
• Write the security architecture and API design documents, the infrastructure parts of the architecture pack and the bi-monthly operations report.

Required profile

• Linux and Windows server administration on public and sovereign clouds (GCP, OCI, Deem or similar).
• Administration of at least two of Qlik Sense, Talend, Dataiku and MS SQL Server, plus GCP services.
• Incident management: triage, escalation and root-cause reports.
• Encryption at rest and in transit, key management and certificates.
• Good to have: Terraform and CI/CD, SRE practice (SLOs, error budgets, cost alerts), MS SQL Server DBA depth, Google Professional Cloud Security Engineer, CISSP, CCSP or ITIL, and experience with national cybersecurity-control audits.

Required skills

• Monitoring and alerting (Cloud Logging and Monitoring, Prometheus and Grafana or similar) and runbooks.
• Vulnerability scanning, patching and hardening, and endpoint-protection tools.
• SIEM integration and audit-log design.
• API gateways, OAuth 2.0 and OWASP API Security Top Ten.
• Backup, restore, business continuity and disaster recovery in the cloud.