Cybersecurity Engineer

Tibah Airports Operation Co.; Medina; On-site; SAR 180,000 - 300,000; Full time

Job summary

Turah Airports Operation Co. seeks a Cybersecurity Engineer to design, implement, and operate security controls protecting data, systems, and networks. The role emphasizes incident detection, response, and regulatory alignment in a demanding environment.

The engineer will configure DLP, MDM, and IAM solutions, support ECC/compliance assessments, and routinely monitor security technologies to prevent breaches.

Qualifications

• Bachelor's degree in Cybersecurity, IT, CS, Systems Engineering or related field.
• CISSP certification required.
• Minimum 4 years' experience in incident detection and incident response security solutions.
• Languages: Arabic (Fluent), English (Advanced).

Responsibilities

• Plan, implement, manage, monitor, and upgrade security measures to protect data, systems, and networks.
• Troubleshoot security and network problems.
• Manage and configure DLP use cases and policies.
• Enforce data classification and data protection controls.
• Manage and configure MDM solutions for corporate and BYOD devices.
• Administer IAM controls including provisioning, role management, and reviews.
• Operate and monitor core security technologies (Firewalls, VPNs, IDS/IPS, Web Proxy, Endpoint protection).
• Ensure ECC alignment and support compliance assessments.
• Respond to security breaches and incidents.
• Daily admin tasks, reporting, and cross-department communication.
• Test and identify vulnerabilities.

Skills

Firewalls

Office 365 Security

Endpoint Security

Networking basics

Scripting (Python/PowerShell)

Education

Bachelor's degree in Cybersecurity, IT, CS or related field

Tools

DLP solutions

MDM solutions

IAM controls

Job description

Job Purpose

The Cybersecurity Engineer is responsible for designing, implementing, operating, and continuously improving technical security controls to protect the organization’s information assets, systems, and networks. The role requires strong analytical thinking, deep technical expertise in cybersecurity technologies, and the ability to effectively respond to security incidents while operating in a regulated environment.

Responsibilities

• Planning, implementing, managing, monitoring, and upgrading security measures for the protection of the organization’s data, systems, and networks.

• Troubleshooting security and network problems.

• Manage and configure Data Loss Prevention (DLP) solutions, including creation, tuning, and maintenance of DLP use cases and policies.

• Implement and enforce data classification frameworks and data protection controls across the organization.

• Manage and configure Mobile Device Management (MDM) solutions to secure corporate and BYOD devices.

• Manage and administer Identity and Access Management (IAM) controls, including access provisioning, role management, and periodic access reviews.

• Operate, configure, and monitor core security technologies (Firewalls, VPNs, IDS/IPS, Web Proxy and Endpoint protection) and respond to security incidents.

• Ensure security controls are implemented and managed in alignment with NCA Cybersecurity Essential Controls (ECC) and support compliance assessments.

• Responding to all system and/or network security breaches.

• Ensuring that the organization’s data and infrastructure are protected by enabling the appropriate security controls.

• Testing and identifying network and system vulnerabilities.

• Daily administrative tasks, reporting, and communication with the relevant departments in the organization.

Education requirements: Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, Systems Engineering or a related field.

Certification Requirements: Certified Information Systems Security Professional (CISSP)

Experience: Minimum 4 years of work experience with incident detection and, incident response Security solutions.

Languages: Arabic (Fluent), English (Advance).

Technical Skills:

• Strong experience with Firewalls (configuration, operation, and maintenance).
• Experience with Office 365 Security, VSX, Endpoint Security solutions.
• Solid understanding of networking concepts and infrastructure security.
• Proficiency in one or more scripting/programming languages such as Python, PowerShell, C++, Java, or Ruby.