Specialist I, Cybersecurity

About the role

The Specialist I, Cybersecurity will lead the design, implementation, operation and continuous improvement of advanced security solutions protecting the organisation’s IT infrastructure, applications, cloud environments and data assets. The role provides senior technical expertise across security engineering, threat detection, vulnerability management, security architecture and incident response while ensuring compliance with regulatory frameworks such as NCA Cybersecurity Controls and PDPL.

Key responsibilities

• Design, configure and maintain firewalls, IDS/IPS, SIEM, EDR/XDR, DLP, IAM, PAM and other security monitoring platforms.
• Develop and enhance security architecture for enterprise networks, systems, applications and cloud services.
• Manage security tools, policies, rules and configurations to improve threat detection and prevention.
• Conduct security assessments, vulnerability management and penetration testing activities.
• Analyse security alerts, investigate incidents, perform root‑cause analysis and coordinate remediation.
• Create security hardening standards and ensure secure configuration of systems and infrastructure.
• Lead security reviews for new technologies, applications, vendors and third‑party integrations.
• Monitor emerging threats, lead incident response, and improve SIEM detection rules and use cases.
• Ensure cybersecurity controls align with NCA Essential Cybersecurity Controls, PDPL and other regulatory requirements.

Required profile

• At least 60 months (5 years) of hands‑on experience in cybersecurity engineering and operations.
• Proven ability to design and implement security architectures across on‑premise and cloud environments.
• Experience in incident response, threat analysis and vulnerability management.
• Familiarity with Saudi regulatory frameworks such as NCA ECC and PDPL.

Required skills

• Risk assessments
• XDR
• Security Architecture
• Security Assessments
• EDR
• Cybersecurity policies
• Security hardening standards
• Threat detection
• Security monitoring platforms
• Vulnerability Management
• DLP
• IPS
• Incident Response
• Technical Documentation
• Security Controls
• IAM
• Firewalls
• IDS
• SIEM
• PAM
• Penetration Testing