IT Security Engineer

About the role

The IT Security Engineer is responsible for protecting the confidentiality, integrity, and availability of all IT systems, applications, and data. The role aligns security practices with Saudi regulatory requirements, corporate governance frameworks, and internal policies while supporting the transition of vendor‑managed systems to internal control.

Key responsibilities

• Ensure IT security practices comply with Saudi regulations and internal policies; conduct audits and compliance assessments for applications, infrastructure, and cloud services.
• Monitor, detect, and respond to security threats; perform vulnerability assessments and penetration testing; manage patching and corrective actions.
• Secure application and infrastructure layers, including web, APIs, databases, and client applications; review code, architecture, and deployment processes for security risks.
• Set up monitoring, alerting, and logging for security events; lead incident response and post‑incident analysis; develop disaster recovery and business continuity plans.
• Create security guidelines, SOPs, and documentation; deliver training and workshops to raise security awareness.
• Collaborate with DevOps, Infra, and Development teams to design secure architectures and approve security measures for new tools and integrations.

Required profile

• Bachelor's degree in Computer Engineering, Computer Science, or a related field.
• Preferred certifications: CISSP, CISM, CEH, ISO27001 Lead Implementer, or equivalent.
• Minimum 3 years of experience in IT security, preferably in an enterprise or multi‑location environment.

Required skills

• Vulnerability assessment and penetration testing.
• Patch management and corrective remediation.
• Access control, authentication, and encryption.
• Secure configuration and hardening of systems.
• Security monitoring, alerting, and logging.
• Incident response and post‑incident analysis.
• Disaster recovery and business continuity planning.