Cybersecurity Engineer

SSC; Saudi Arabia; On-site; SAR 200,000 - 300,000; Full time

Job summary

A leading cybersecurity organization in Saudi Arabia is seeking a professional to manage cybersecurity systems in Health Affairs. Responsibilities include monitoring alerts, classifying incidents, and ensuring system compliance. The ideal candidate will have experience with firewalls, SIEM, and incident response plans. This role offers opportunities for growth and a chance to work in a vital sector.

Responsibilities

• Manage all cybersecurity systems in Health Affairs.
• Monitor alerts and security incidents continuously.
• Classify incidents into appropriate categories.
• Notify system administrators for severe incidents.
• Follow the incident response plan.
• Document and report incidents.
• Resolve user requests related to cybersecurity.
• Track cyberattacks and gather information.
• Create/update use cases for new systems.
• Analyze cyber events reported by the Cybersecurity Authority.
• Conduct regular vulnerability scans.
• Monitor system compliance with technical security standards.
• Communicate with other departments during investigations.
• Prepare a monthly report summarizing incidents.

Job description

Responsibilities

• Working with the team to manage all cybersecurity systems in Health Affairs, such as Firewall, WAF, SIEM, AV, EDR, Proxy.
• Continuous monitoring of alerts and security incidents.
• Classifying incidents into appropriate categories.
• Taking actions based on the severity of the incident, such as:
  • Notifying system administrators.
  • Following the incident response plan.
  • Escalating incidents according to incident response procedures.
  • Properly documenting incidents.
• Documenting and reporting incidents.
• Resolving issues related to user requests.
• Tracking cyberattacks and collecting information about attackers.
• Creating or updating use cases for new systems and applications.
• Analyzing cyber events and incidents reported by the Cybersecurity Authority.
• Conducting regular vulnerability scans against internal IP addresses.
• Monitoring the level of system compliance with the technical security standards of the National Guard, which will be approved by the IT department after evaluation.
• Communicating with other departments during incident investigations.
• Preparing a monthly report, which should summarize the main incidents that were handled.
• Maintaining and operating the latest available versions of cybersecurity systems in Health Affairs.
• Identifying, classifying, prioritizing, and investigating related events collected from firewalls, network devices, proxies, IDS/IPS systems, antivirus systems, databases, servers, and endpoints.