Cyber Security Architect / Expert - KSA (Onsite)

Arab Solutions; Riyadh; On-site; SAR 350,000 - 600,000; Full time

Job summary

Arab Solutions is seeking a Cyber Security Architect / Expert in Saudi Arabia for a 1-year onsite engagement. You will define security architecture, controls, identity management, compliance and risk mitigation across applications, data, cloud and integration layers.

The role requires hands-on configuration of Entra ID, MFA, Conditional Access, Key Vault, WAF and Defender/Sentinel, plus leading secure-by-design reviews and security testing.

Qualifications

• 10+ years of experience in cyber security architecture and governance.
• Hands-on experience with Entra ID, Azure security stack and DevSecOps pipelines.
• Strong knowledge of SAST/DAST/SCA, OWASP, API and mobile security.

Responsibilities

• Define security architecture, controls, identity, access, compliance and risk mitigation requirements.
• Ensure secure-by-design across applications, data, cloud and integrations.
• Configure Entra ID, MFA, Conditional Access, RBAC/PIM, Key Vault, WAF, Defender and Sentinel.
• Coordinate security assessments (SAST, DAST, VA/PT, API and configuration) and track remediation.

Skills

Security configuration

DevSecOps

Vulnerability testing

SIEM/SOAR

Evidence collection

Operational security

Tools

Sentinel

KQL

Burp Suite

Nessus

SAST/DAST/SCA tools

OWASP

API security

Mobile security

Security scripting

Job description

Job Role: Cyber Security Architect / Expert

Experience: 10+ years

Location: KSA (Onsite)

Duration: 1 year

Technology Stack:

Entra ID, APIM, Azure Policy, Key Vault, Defender for Cloud, Microsoft Sentinel, Microsoft Fabric/Purview, Azure DevOps security pipelines, API and microservices security, IoT security, and GenAI security.

Security Assessment & Detection:

Sentinel/KQL, Burp Suite, Nessus, SAST/DAST/SCA tools, OWASP web, API, and mobile security, and security scripting.

Job description:

Define security architecture, controls, identity, access, compliance and risk mitigation requirements.Ensure solution design follows secure-by-design principles across application, data, cloud and integration layers.

Configure Entra ID, MFA, Conditional Access, RBAC/PIM, Key Vault, WAF, Firewall, private endpoints, Defender and Sentinel. Execute or coordinate SAST, DAST, VA/PT, API and configuration assessments, track remediation and retest fixes.

Technical Skills Summary:

Security configuration, DevSecOps, vulnerability testing, SIEM/SOAR, evidence collection and operational security.

Functional Skills Summary:

Security Architecture & Governance:

Define target architecture, security controls, risk mitigation measures, compliance alignment, access governance, and secure-by-design reviews, ensuring adherence to applicable NCA, PDPL, NDMO, and DGA requirements.

Platform Engineering & Operations:

Build and operate environments, automate deployments, manage releases, and ensure monitoring, reliability, performance, and operational readiness.