Firewall & Security Systems Operator

VaporVM; Riyadh; On-site; SAR 48,000 - 120,000; Full time

Job summary

A leading cybersecurity firm in Saudi Arabia is seeking an experienced System Operator to manage cybersecurity systems at King Abdul-Aziz Medical City in Riyadh. The role requires over 5 years of experience in cybersecurity operations with certifications such as CISSP or CASP+. Candidates should be skilled in handling security tools and be capable of working onsite during official hours. Strong incident response skills are a must. This position offers an opportunity to engage directly with security and IT teams.

Qualifications

• 5+ years of experience in cybersecurity system operations.
• Mandatory certifications: CISSP or CASP+.
• Hands-on experience with security monitoring tools.

Responsibilities

• Operate and manage cybersecurity systems.
• Continuous monitoring of security alerts, events, and incidents.
• Document and report all incidents accurately.

Skills

Cybersecurity operations

Incident response

Security monitoring tools

High attention to detail

Education

CISSP or CASP+

CCNA

Tools

EDR

SIEM

Firewall

Proxy

Job description

We are seeking an experienced System Operator to manage and operate cybersecurity systems within King Abdul-Aziz Medical City, Riyadh, The candidate will support all cybersecurity operations, work onsite during official Health Affairs working hours, and collaborate closely with security and IT teams.

• Operate and manage cybersecurity systems: EDR, AV, SIEM, WAF, Firewall, Proxy, etc.
• Continuous monitoring of security alerts, events, and incidents.
• Classify incidents and take actions based on severity.
• Notify system owners and follow incident response plans.
• Escalate incidents as per standard procedures.
• Document and report all incidents accurately.
• Handle and resolve cybersecurity-related service requests.
• Track cyberattacks and create/update security use cases.
• Analyze events and incidents from multiple security systems.
• Manage incidents reported by the (NCA).
• Ensure compliance with HA-MNG cybersecurity technical standards.
• Coordinate with departments during incident investigations.
• Prepare monthly reports summarizing incidents and major findings.
• Maintain the latest approved versions of cybersecurity systems.
• Collect, classify, prioritize, and investigate events from:
• Firewalls
• IPS/IDS
• Antivirus
• Databases
• Servers

🎓 Required Qualifications

• 5+ years of experience in cybersecurity system operations.
• Mandatory Certifications: CISSP or CASP+
• CCNA
• Hands-on experience with security monitoring tools.
• Strong understanding of incident response and cybersecurity standards.
• Ability to work onsite and operate in a structured security environment.