Cyber Security Specialist

About the role

Alkhorayef Group is seeking a Cyber Security Specialist to operate and enhance its security tooling across multiple entities in Saudi Arabia. The role offers hands‑on exposure to day‑to‑day security operations, vulnerability management, incident response and regulatory compliance within a dynamic, multi‑company environment.

Key responsibilities

• Operate and maintain security platforms including SIEM, EDR, firewalls, web‑filtering and email security consoles.
• Review, triage and escalate security alerts, ensuring timely closure of incidents.
• Conduct scheduled vulnerability scans on servers, endpoints, network devices and cloud workloads, rank findings and verify remediation.
• Support control self‑assessments against NCA Essential Cybersecurity Controls, CSCC and ISO 27001, and keep the cyber‑risk register up to date.
• Assist with compliance reporting, internal and external audits, and regulatory submissions.
• Perform first‑line incident analysis, follow approved playbooks, preserve evidence and produce post‑incident reports.
• Process access requests, manage MFA and privileged‑access tools, and support periodic user‑access reviews.
• Deliver security awareness programmes, run phishing simulations and report completion metrics.
• Support vendor and cloud‑service security assessments against group requirements.

Required profile

• Bachelor’s degree in Information Security, Cybersecurity, Computer Science or a related field.
• 1–2 years of experience in security operations, vulnerability management, GRC or incident handling (including internships or co‑op programs).
• Working knowledge of NCA Essential Cybersecurity Controls and familiarity with ISO 27001 or NIST Cybersecurity Framework.
• Professional certification such as CompTIA Security+, ISC2 CC or equivalent is a plus.
• Strong written English and Arabic for reporting to technical and management audiences.

Required skills

• Hands‑on experience with SIEM and EDR platforms.
• Proficiency in vulnerability scanning tools.
• Knowledge of firewall, web‑filtering and email security solutions.
• Understanding of MFA and privileged‑access management tooling.
• Experience with phishing simulation and security awareness programmes.
• Familiarity with NCA Essential Cybersecurity Controls, ISO 27001 and NIST frameworks.