IT Security Engineer

About the role

We are looking for an IT Security Engineer to join SiFi’s cybersecurity team. The role is hands‑on, focused on implementing and maintaining security controls across our on‑premise and Oracle Cloud Infrastructure environments, ensuring compliance with the Saudi Central Bank (SAMA) Cybersecurity Framework.

Key responsibilities

• Own technical remediation of infrastructure vulnerabilities on Windows, Linux and network platforms, tracking critical findings to closure within SLA.
• Apply and maintain hardening baselines for servers, endpoints, network devices and cloud workloads; manage EDR, MDM and DLP coverage.
• Investigate and resolve SOC/MDR cases, determine root causes and apply corrective fixes.
• Onboard privileged accounts into the enterprise PAM platform and remediate privileged‑access gaps.
• Operate OCI security controls (IAM policies, security lists, security zones) and remediate Cloud Guard findings.
• Implement security controls for backup and restore infrastructure, including access control, encryption, immutability and validation during restore testing.

Required profile

• Hands‑on security professional with strong experience in vulnerability and patch management.
• Ability to work closely with Site Reliability Engineering, application owners and business stakeholders.
• Familiarity with SAMA cybersecurity requirements and a focus on continuous security posture improvement.
• Excellent problem‑solving skills and the capacity to drive remediation actions to completion.

Required skills

• Windows and Linux operating systems
• Network device configuration and hardening
• Oracle Cloud Infrastructure (OCI) security services – IAM, Cloud Guard
• Endpoint Detection & Response (EDR), Mobile Device Management (MDM), Data Loss Prevention (DLP)
• Privileged Access Management (PAM) platforms
• Backup encryption, immutability and restore validation
• Vulnerability scanning and patch management tools