Network Security Engineer – Full-time

About the role

We are seeking an experienced Network Security Engineer to protect and maintain our organization’s network infrastructure in Saudi Arabia. The role combines hands‑on security engineering with project‑management responsibilities, ensuring robust protection while driving security initiatives across the enterprise.

Key responsibilities

• Design, implement and maintain firewalls, VPNs, IDS/IPS and endpoint‑protection solutions.
• Monitor network traffic, system logs and SIEM alerts for threats and anomalies.
• Conduct vulnerability scans, penetration testing and coordinate remediation efforts.
• Manage identity and access controls following least‑privilege principles.
• Investigate security incidents, perform root‑cause analysis and develop mitigation strategies.
• Lead cybersecurity and infrastructure projects from initiation through completion, defining scope, timelines, resources and deliverables.
• Coordinate with internal teams, vendors and service providers.
• Maintain network diagrams, configurations and security‑architecture documentation.
• Develop and update security policies, procedures and standards.
• Conduct risk assessments, support audits and compliance reviews, and provide security awareness training.

Required profile

• Bachelor’s degree in Computer Science, Cybersecurity, Information Technology or a related field.
• 3‑5 years of hands‑on network‑security experience.
• 1‑2 years of experience leading or coordinating IT or cybersecurity projects.
• Strong understanding of TCP/IP, DNS, DHCP, routing, switching and VPN technologies.
• Familiarity with ISO 27001, NIST, HIPAA or comparable compliance frameworks.
• Knowledge of cloud platforms (AWS or Azure) and cloud‑security principles.

Required skills

• Fortinet or Palo Alto firewalls
• VPN technologies
• IDS/IPS solutions
• Endpoint‑protection platforms
• SIEM platforms
• Network‑access control systems
• Vulnerability scanning and penetration testing tools
• Risk assessment and threat modeling
• TCP/IP, DNS, DHCP, routing and switching
• AWS, Azure and cloud‑security concepts
• ISO 27001, NIST, HIPAA compliance knowledge