Cyber Security Specialist

Sahm Capital; Riyadh; On-site; SAR 180,000 - 240,000; Full time

Job summary

Sahm Capital is seeking a Cybersecurity Specialist to design, implement and operate technical cybersecurity controls across the organization. The role emphasizes securing on-premises and cloud environments, vulnerability management and SOC-supporting activities.

Qualified candidates have 3–6 years in cybersecurity operations or security engineering, with certifications such as Security+, CEH, CySA+, OSCP. Arabic fluency and English proficiency are required.

Qualifications

• Bachelor’s degree in Cybersecurity, Information Security, Computer Science or equivalent degree.
• 3–6 years of experience in cybersecurity operations, SOC or security engineering roles.
• Must have certifications: Security+, CEH, CompTIA CySA+, OSCP.

Responsibilities

• Design, implement and operate technical cybersecurity controls across the organization.
• Deploy, configure and manage cybersecurity tools including DLP, EDR, firewalls and IAM solutions.
• Review system and cloud architectures from a security perspective and identify weaknesses.
• Conduct vulnerability assessments and coordinate remediation activities.
• Support incident detection, investigation and response activities and improve procedures.

Skills

SOC operations

Security engineering

Vulnerability management

Incident response

Threat detection

Cloud security

Network security

Security tooling

Education

Bachelor’s degree in Cybersecurity

Information Security

Computer Science

Tools

SIEM

EDR

Firewalls

IAM

BrandShield

PhishLabs

Recorded Future

DMARC

Job description

The Cybersecurity Specialist is responsible for designing implementing and operating technical cybersecurity controls across the organization. The role focuses on securing infrastructure reviewing system and cloud architectures managing vulnerabilities and supporting penetration testing activities while ensuring alignment with internal security standards and Saudi cybersecurity requirements

Duties and Responsibilities

Security Engineering and Infrastructure Protection

• Deploy configure and manage cybersecurity tools including DLP EDR firewalls and IAM solutions …etc.
• Support secure configuration of systems servers endpoints and cloud environments
• Monitor security events and support SOC operations for threat detection and response

Architecture Security Review

• Review system applications and cloud architectures from a security perspective
• Identify design weaknesses and recommend security improvements
• Support secure design practices for new systems and integrations

Vulnerability Management and Penetration Testing

• Conduct regular vulnerability assessments across infrastructure and applications
• Track prioritize and support remediation of security vulnerabilities
• Coordinate and support third party penetration testing activities and validate findings

Incident Response and Security Operations

• Support incident detection investigation and response activities
• Assist in maintaining and improving incident response procedures
• Participate in security investigations and root cause analysis

Systems and Security Hardening

• Support system hardening activities across servers endpoints and network devices
• Ensure security baselines and configurations are properly implemented
• Assist in improving overall security posture across IT environments

Education

Bachelor’s degree in Cybersecurity, Information Security, Computer Science or equivalent degree

Qualifications and Experience:

3–6 years of experience in cybersecurity operations, SOC or security engineering roles

• Certifications (Must have):

Security+

• Certified Ethical Hacker (CEH)
• CompTIA CySA+
• OffSec Certified Professional (OSCP)
• Native Arabic fluent in write and speak English (Saudi National)
• Proven experience implementing NCA ECC, CMA Cybersecurity Guidelines, SDAIA PDPL rules, and Tadawul security framework is preferable.
• Knowledge of Brand Protection / Digital Risk Protection (DRP) tools (e.g., BrandShield, PhishLabs, Recorded Future) and domain takedown mechanisms.
• Knowledge of cybersecurity tools (SIEM, EDR, firewalls, IAM …).
• Understanding of vulnerability management, incident response and risk management.
• Basic understanding of email security (DMARC, DKIM, SPF) and phishing defense.
• Strong documentation and coordination skills.
• Ability to manage multiple tasks in a structured environment.
• Team-oriented attitude to help other colleagues and teams with technical problems
• Strong interpersonal communication and relationship-building skills
• Ability to manage time and effectively prioritize numerous projects at one time
• Organized and attentive to detail, flexible with changing priorities and able to communicate in a polite and professional manners