Cybersecurity & Infrastructure Security Lead — Hybrid

Masharah Advisory; Jeddah; Hybrid; SAR 335,000 - 603,000; Full time

Job summary

Masharah Company in Jeddah, Saudi Arabia, seeks an experienced Cybersecurity & Infrastructure Security Specialist to own the company’s cybersecurity requirements, security architecture, risk management, and overall security posture.

The role serves as the technical security authority and main security representative when dealing with external providers. You will identify risks, define controls, lead discussions, and validate delivered security outcomes.

Qualifications

• 3–5+ years of professional experience in Cybersecurity, Infrastructure Security, Network Security, Security Engineering, or related field.
• Strong understanding of cybersecurity principles and security architecture.
• Experience conducting security assessments and identifying gaps and risks.
• Knowledge of network security technologies: Firewalls/NGFW, IPS/IDS, network segmentation, VLANs, DMZ, VPN/ZTNA, secure remote access.
• Understanding of server, virtualization, endpoint, and infrastructure security.
• Knowledge of IAM, MFA, RBAC, PAM, and privileged access management.
• Experience with EDR/XDR, SIEM/SOC, security monitoring and centralized logging.
• Understanding of WAF and web/application security.
• Knowledge of vulnerability management and penetration testing.
• Understanding of backup, disaster recovery, business continuity, RTO/RPO, and ransomware resilience.
• Familiarity with GitHub, CI/CD, DevSecOps, and application security is a strong advantage.
• Ability to review, evaluate and challenge security architectures, vendor proposals.
• Strong communication with technical stakeholders, vendors, and service providers.
• Strong analytical and problem-solving skills.
• Ability to work independently and own cybersecurity requirements.
• English communication skills; Arabic a plus.

Responsibilities

• Own and continuously assess the company’s overall cybersecurity and infrastructure security posture.
• Conduct security assessments and identify security gaps, risks, vulnerabilities, and areas requiring improvement.
• Define cybersecurity requirements, security controls, and technical security standards.
• Develop and review security architecture covering: Network Security, Firewalls / NGFW, Network Segmentation, DMZ / WAF, VPN / ZTNA, Servers & Virtualization, Identity & Access Management, EDR/XDR, SIEM / SOC, Backup & Disaster Recovery, Application & Data Security.
• Develop cybersecurity and infrastructure security requirements for external service providers.
• Identify, evaluate, and recommend appropriate cybersecurity technologies and solutions.
• Lead technical meetings and discussions with cybersecurity, network, infrastructure, and other service providers.
• Challenge and evaluate vendors’ proposed architectures, technologies, configurations, and security recommendations.
• Review security architecture, HLDs, LLDs, technical proposals, BoQs, and implementation plans.
• Oversee security implementation and ensure agreed security requirements and controls are correctly implemented.
• Validate and test security controls before accepting implemented solutions.
• Establish and oversee vulnerability management and remediation processes.
• Coordinate penetration testing and security assessments and ensure findings are properly remediated.
• Define and oversee security monitoring, logging, SIEM/SOC, EDR/XDR, and alerting requirements.
• Establish incident response, containment, recovery, and security incident-handling requirements.
• Define and review IAM, MFA, RBAC, PAM, privileged access, and network access-control requirements.
• Ensure appropriate security hardening and secure configuration of infrastructure and security systems.
• Review GitHub, CI/CD, DevSecOps, and application security practices where applicable.
• Review backup, disaster recovery, business continuity, RTO/RPO, and ransomware-resilience requirements.
• Assess data protection, data residency, and cross-border data-transfer considerations.
• Identify applicable Saudi cybersecurity and data protection requirements and support compliance efforts.
• Maintain cybersecurity policies, standards, risk registers, security architecture, and technical documentation.
• Provide management with regular updates on security risks, gaps, priorities, and remediation progress.
• Act as the primary technical security representative between the company and external service providers.

Skills

Cybersecurity

Security architecture

Security assessments

Network security

IAM / MFA / RBAC

EDR/XDR / SIEM / SOC

Vulnerability management

Penetration testing

Disaster recovery

English fluency

Arabic skills

Job description

Masharah Company in Jeddah, Saudi Arabia, seeks an experienced Cybersecurity & Infrastructure Security Specialist to own the company’s cybersecurity requirements, security architecture, risk management, and overall security posture.

The role serves as the technical security authority and main security representative when dealing with external providers. You will identify risks, define controls, lead discussions, and validate delivered security outcomes.