Cybersecurity Specialist – Riyadh / Madinah, Saudi Arabia

Hrhorizon; Saudi Arabia; On-site; SAR 90,000 - 130,000; Full time

Job summary

Hrhorizon in Saudi Arabia seeks a cybersecurity professional to support information security operations, monitor security systems, and respond to incidents. You will manage FortiGate firewalls, SIEMs, and vulnerability programs while ensuring patching and governance aligned with NCA ECC and ISO/IEC 27001.

The role covers incident triage, IOC analysis, and coordination with regulators, with opportunities to enhance security documentation and reporting across Riyadh and Madinah.

Qualifications

• FortiGate firewall administration and policy management.
• SIEM monitoring, log analysis, and alert configuration.
• Vulnerability assessment, remediation tracking, and patching.
• Incident triage, investigation, containment, and recovery.
• IOC identification and impact assessment, with documentation.
• Knowledge of NCA ECC and ISO/IEC 27001 compliance is preferred.

Responsibilities

• Monitor security systems and manage FortiGate firewalls and policies.
• Analyse security alerts, logs, and events from systems, networks, and apps.
• Lead vulnerability assessments and coordinate remediation actions.
• Apply security patches and harden systems as part of ongoing ops.
• Coordinate incident response and prepare post-incident reports.
• Produce periodic security reports and ensure governance compliance.
• Engage with service providers and regulators on cybersecurity matters.

Skills

FortiGate firewall

SIEM monitoring

Vulnerability management

Security patching

Incident response

IOC analysis

Security documentation

Policy development

Communication & coordination

Job description

Location: Riyadh / Madinah, Saudi Arabia
Job Category: Information Technology (IT) & Software
Industry: Information Technology / Cybersecurity
Employment Type: Not specified
Experience Required: Not specified in the original vacancy

Job Overview

An IT company in Saudi Arabia is seeking a cybersecurity professional to support its information security operations, monitor security systems, manage vulnerabilities, and respond to cybersecurity incidents. The successful candidate will help protect the organisation's networks, servers, systems, and applications by identifying suspicious activities, analysing security alerts, and implementing appropriate security controls.

The role involves managing FortiGate firewalls, monitoring Security Information and Event Management (SIEM) solutions, coordinating vulnerability assessments, and ensuring security patches are applied. The candidate will also contribute to security governance and compliance activities aligned with frameworks such as the National Cybersecurity Authority's Essential Cybersecurity Controls (NCA ECC) and ISO/IEC 27001.

This opportunity is suitable for a professional with practical cybersecurity monitoring, incident response, vulnerability management, and security documentation skills. The position is advertised for Riyadh and Madinah; applicants should confirm the specific work location and experience requirements with the employer.

Key Responsibilities

Security Monitoring and Firewall Management

• Manage and monitor FortiGate firewalls and maintain appropriate security policies.
• Monitor and analyse alerts generated by security systems and monitoring platforms.
• Review system, network, server, and firewall logs to identify suspicious activities.
• Manage SIEM solutions, analyse security events, and configure relevant alerts.
• Monitor system updates and verify that security patches are applied.

Vulnerability Management

• Coordinate and follow up on vulnerability assessments.
• Review vulnerability assessment reports and support remediation planning.
• Track identified vulnerabilities and coordinate corrective actions with relevant teams.
• Help improve the organisation's security posture through ongoing monitoring and remediation.

Security Governance and Compliance

• Prepare, review, and update information security policies and procedures.
• Support compliance activities aligned with NCA ECC and ISO/IEC 27001 requirements.
• Prepare periodic cybersecurity reports for management.
• Maintain security documentation in accordance with approved policies and procedures.
• Coordinate with service providers and relevant regulatory authorities on cybersecurity matters.

Incident Response and Investigation

• Respond to cybersecurity incidents according to approved incident response procedures.
• Conduct initial incident triage and classify incidents based on severity and priority.
• Investigate security incidents, analyse indicators of compromise (IOCs), and determine their scope and potential impact.
• Review security logs from systems, networks, and firewalls to investigate suspicious activity.
• Implement or coordinate containment, eradication, and recovery procedures.
• Prepare incident investigation reports and post-incident reports.
• Respond to security alerts issued by the National Cybersecurity Authority (NCA) and provide required technical information.
• Document incident response activities and ensure records follow approved procedures.

Technical Support and Coordination

• Provide cybersecurity guidance and technical support to users and departments.
• Coordinate with service providers and regulators regarding security incidents.
• Communicate security risks, incident findings, and remediation requirements to relevant stakeholders.

Requirements and Qualifications

The original vacancy does not specify mandatory academic qualifications, certifications, or a minimum number of years of experience. Candidates should be prepared to demonstrate relevant knowledge or experience in the following areas:

• FortiGate firewall administration and security policy management.
• SIEM monitoring, security log analysis, and alert configuration.
• Vulnerability assessment, reporting, and remediation follow-up.
• Security patch management and system hardening.
• Cybersecurity incident triage, investigation, and response.
• Indicators of compromise (IOCs) and incident impact assessment.
• Incident containment, eradication, recovery, and post-incident reporting.
• Knowledge of NCA ECC and ISO/IEC 27001 compliance requirements.
• Security policy development and technical documentation.
• Strong analytical, communication, and coordination skills.

Relevant cybersecurity certifications and formal security training may be useful, but specific certifications were not listed as mandatory in the original announcement.

Salary, Benefits and Career Growth

The employer has not disclosed a salary range or benefits package. Compensation, allowances, insurance, working hours, and other employment conditions should be confirmed directly with the recruitment team.

This role may provide professional development in security operations, threat monitoring, vulnerability management, incident response, firewall administration, and cybersecurity compliance. It may also help candidates deepen their experience with security governance and regulatory requirements in Saudi Arabia.