Cybersecurity Engineer

PrimeGate Company; Saudi Arabia; On-site; SAR 120,000 - 180,000; Full time

Job summary

A leading cybersecurity firm in Saudi Arabia is seeking a Cybersecurity Engineer to manage and implement security solutions protecting information assets. Responsibilities include deploying security tools, monitoring incidents, vulnerability management, and ensuring compliance with regulatory frameworks. Candidates must hold a relevant bachelor's degree, possess at least one professional certification, and have a minimum of 3 years of experience in the cybersecurity field. This position offers an opportunity to work within a dynamic environment focused on resilience against cyber threats.

Qualifications

• Bachelor’s degree required in a related technical field.
• Must have one professional cybersecurity certification.
• Minimum of 3 years hands-on experience in cybersecurity engineering.

Responsibilities

• Deploy and maintain security solutions including firewalls and SIEM.
• Monitor security events and respond to incidents according to procedures.
• Conduct vulnerability assessments and manage remediation activities.

Skills

Cybersecurity engineering

Incident response

Vulnerability management

Security policy compliance

Cloud security

Identity & Access Management

Education

Bachelor’s degree in computer science, Cybersecurity, IT or related field

Tools

SIEM

Firewalls

EDR

IDS/IPS

Cloud platforms (AWS, Azure, GCP, Alibaba Cloud)

Job description

Job summary

Responsible for designing, implementing, and maintaining the organization’s cybersecurity infrastructure and controls to protect information assets, systems, and networks from cyber threats. This role delivers proactive threat detection, incident response, vulnerability management, and security compliance aligned with NCA ECC/CCC frameworks and Saudi regulatory requirements, ensuring a resilient and secure operational environment.

Key responsibility

• Security Infrastructure Management: Deploy, configure, and maintain security solutions including firewalls, IDS/IPS, SIEM, WAF, EDR, DLP, and endpoint protection platforms to safeguard organizational assets
• Threat Monitoring & Incident Response: Continuously monitor security events and alerts; investigate and respond to security incidents following documented incident response procedures; perform root cause analysis and implement corrective actions
• Vulnerability Management: Conduct regular vulnerability assessments and penetration tests on systems, networks, and applications; prioritize and track remediation activities to minimize organizational risk
• Security Policy & Compliance: Develop, maintain, and enforce security policies, standards, and procedures; ensure alignment with NCA ECC, CCC, OTCC, PDPL, and other applicable regulatory frameworks
• Cloud Security: Implement and monitor cloud security controls including CSPM, CWPP, and identity management across cloud platforms; ensure cloud workloads meet security baseline requirements
• Identity & Access Management: Administer IAM solutions including RBAC, PAM, MFA, and SSO; enforce least-privilege access principles across systems and applications
• Security Awareness & Training: Conduct security awareness training and phishing simulation campaigns to promote a security-conscious culture across the organization

Qualification & Experience

• Bachelor’s degree in computer science, Cybersecurity, Information Technology, Computer Engineering, or a related technical field
• At least one professional cybersecurity certification is required, such as CompTIA Security+, CEH (Certified Ethical Hacker), or equivalent
• Advanced certifications (CISSP, CISM, CISA, GIAC, or equivalent) are highly desirable
• NCA-aligned training or certifications are a significant advantage
• Minimum 3 years of hands‑on experience in cybersecurity engineering, information security, or a related IT security role
• Proven experience operating and managing security tools such as SIEM, firewalls, IDS/IPS, EDR, and WAF
• Experience implementing security controls aligned with NCA ECC/CCC or equivalent frameworks (ISO 27001, NIST CSF)
• Exposure to cloud security concepts and securing workloads on major cloud platforms (AWS, Azure, GCP, or Alibaba Cloud