Cyber Security & Data Protection Engineer

About the role

We are partnering with a technology‑forward real‑estate development company in Riyadh to strengthen its security posture. The Cyber Security & Data Protection Engineer will own the operational security of the entire technology estate, covering corporate headquarters, project sites, IoT devices, and a Microsoft Azure‑based cloud platform.

Key responsibilities

• Secure Azure AI workloads (Azure AI Foundry, OpenAI, Azure ML, RAG pipelines, vector stores) and govern AI agent identities with Microsoft Entra.
• Lead the selection, deployment, and operation of a SIEM platform, handling log collection, alert triage, threat hunting, and incident response across endpoints, network, cloud, and AI workloads.
• Manage end‑to‑end vulnerability management and configure perimeter and internal controls, including Fortinet FortiGate NGFW, IPS/IDS, network segmentation, ZTNA/VPN.
• Enforce zero‑trust principles for users, devices, and workloads; secure OT/IoT and smart‑building systems through segmentation and monitoring.
• Administer security controls in Entra ID/Active Directory for human, workload, and agent identities, and protect Microsoft 365 and Azure services.
• Maintain PDPL compliance, conduct risk assessments, support audits, and keep security documentation up to date.
• Coordinate with system integrators and MSSPs, review third‑party security posture, and lead incident response, backup validation, and DR testing.
• Develop and maintain data‑protection policies, oversee data inventories, conduct privacy risk assessments, and provide privacy awareness training.

Required profile

• Bachelor’s degree in Computer Science, Information Security, or a related field.
• 5‑8 years of hands‑on cybersecurity engineering experience, with at least 2 years managing security across networks, systems, and applications.
• Proven experience securing Azure‑native enterprise environments and operating SIEM solutions.
• Demonstrated ability to lead data‑protection and privacy initiatives under PDPL or equivalent regulations.

Required skills

• Microsoft Azure (including Azure AI Foundry, Azure ML, OpenAI)
• Microsoft Entra ID / Agent ID
• SIEM platforms
• Fortinet FortiGate, IPS/IDS
• Zero‑Trust architecture, ZTNA, VPN
• OT/IoT security, BMS, access control, CCTV, IoT sensors
• Microsoft 365 security
• Vulnerability management
• Data protection and privacy compliance (PDPL)