Cybersecurity Engineer

Tibah Airports Operation | طيبة لتشغيل المطارات; Medina; On-site; SAR 200,000 - 260,000; Full time

Job summary

Tibah Airports Operation is seeking a Cybersecurity Engineer to design, implement, operate, and continually improve security controls across the organization’s data, systems and networks in a regulated aviation environment.

The role requires deep technical expertise, incident response skills, and strong analytical thinking to safeguard information assets and support ECC compliance within a high-stakes infrastructure setting.

Qualifications

• Bachelor's degree in Cybersecurity or related field.
• CISSP certification required.
• Minimum 4 years of experience in incident detection and response.

Responsibilities

• Plan, implement, manage and upgrade security measures to protect data, systems and networks.
• Troubleshoot security and network problems.
• Manage Data Loss Prevention (DLP) use cases and policies.
• Implement data classification and data protection controls.
• Manage Mobile Device Management (MDM) solutions for devices.
• Administer Identity and Access Management (IAM) controls and access reviews.
• Operate and monitor core security technologies and respond to incidents.
• Ensure ECC alignment and support compliance assessments.
• Respond to security breaches and protect data/infrastructure.
• Identify vulnerabilities through testing and monitoring.
• Conduct daily administrative tasks and cross-department reporting.

Skills

Firewall management

Security incident response

DLP & IAM experience

Education

Bachelor's degree in Cybersecurity

CISSP certification

Tools

PowerShell

Python

C++

Job description

Job Purpose

The Cybersecurity Engineer is responsible for designing, implementing, operating, and continuously improving technical security controls to protect the organization's information assets, systems, and networks. The role requires strong analytical thinking, deep technical expertise in cybersecurity technologies, and the ability to effectively respond to security incidents while operating in a regulated environment.

Responsibilities

• Planning, implementing, managing, monitoring, and upgrading security measures for the protection of the organization's data, systems, and networks
• Troubleshooting security and network problems
• Manage and configure Data Loss Prevention (DLP) solutions, including creation, tuning, and maintenance of DLP use cases and policies
• Implement and enforce data classification frameworks and data protection controls across the organization
• Manage and configure Mobile Device Management (MDM) solutions to secure corporate and BYOD devices
• Manage and administer Identity and Access Management (IAM) controls, including access provisioning, role management, and periodic access reviews
• Operate, configure, and monitor core security technologies (Firewalls, VPNs, IDS/IPS, Web Proxy and Endpoint protection) and respond to security incidents
• Ensure security controls are implemented and managed in alignment with NCA Cybersecurity Essential Controls (ECC) and support compliance assessments
• Responding to all system and/or network security breaches
• Ensuring that the organization's data and infrastructure are protected by enabling the appropriate security controls
• Testing and identifying network and system vulnerabilities
• Daily administrative tasks, reporting, and communication with the relevant departments in the organization

Education requirements

Bachelor's degree in Cybersecurity, Information Technology, Computer Science, Systems Engineering or a related field.

Certification Requirements

Certified Information Systems Security Professional (CISSP)

Experience

Minimum 4 years of work experience with incident detection and, incident response Security solutions.

Languages

Arabic (Fluent), English (Advance).

Technical Skills

• Strong experience with Firewalls (configuration, operation, and maintenance)
• Experience with Office 365 Security, VSX, Endpoint Security solutions
• Solid understanding of networking concepts and infrastructure security
• Proficiency in one or more scripting/programming languages such as Python, PowerShell, C++, Java, or Ruby