Infrastructure Security Expert

Sehati for Information Technology Services LLC; Riyadh; On-site; SAR 180,000 - 240,000; Full time

Job summary

Sehati for Information Technology Services LLC is seeking a security-focused professional to develop and implement security policies, manage endpoints, and monitor networks. The role emphasizes incident response and data protection in a Riyadh-based environment.

The candidate will evaluate security solutions, coordinate with vendors, and ensure regulatory compliance while improving the overall security posture of Sehati’s IT infrastructure and applications.

Qualifications

• Bachelor's degree in computer information systems, computer science, computer engineering, or equivalent.
• Preferred master's degree in business, computer information systems, computer science, or engineering, or equivalent.
• At least 2 years of work experience in a similar field.

Responsibilities

• Develop and implement security policies, procedures and standards.
• Perform security admin on OS, apps, and network security devices.
• Develop security plans to protect physical data center environments.
• Identify weaknesses and vulnerabilities using logs, analysis and observations.
• Identify network security vulnerabilities and provide technical solutions.
• Assist in managing endpoint security services including antivirus and encryption.
• Implement data protection measures such as tokenization and encryption.
• Ensure data security compliance with regulations and best practices.
• Respond to and resolve security incidents and breaches promptly.
• Develop incident response plans to minimize impact.
• Maintain relationships with security vendors and ensure contracts support Sehati's needs.
• Evaluate and select security solutions and services from vendors.
• Create and maintain detailed documentation of security policies and incidents.
• Identify potential security risks and vulnerabilities.
• Manage security controls such as firewalls and ASM.
• Monitor and analyze events to detect and respond to breaches.
• Assist in integrating security measures into infrastructure and applications.

Skills

Security policies

Network security

Threat detection

Incident response

Security analytics

Communication skills

Education

Bachelor's degree in computer information systems

Master's degree preferred

Tools

Firewalls

IDS/IPS

Encryption

Endpoint protection

Job description

Technical/Core Responsibilities and Duties:

• Develop and implement security policies, procedures, and standards.
• Perform security administration on operating systems, applications, and network security devices.
• Develop and implement security plans and processes to protect physical data center environments.
• Assist in identifying weaknesses and vulnerabilities in the network infrastructure using security logs, network analysis, and observations.
• Identify network security vulnerabilities and provide technical solutions.
• Assist in managing endpoint security services, including operations on antivirus, encryption, personal firewalls, and application control products.
• Implement data protection measures, such as tokenization, encryption, and security event management.
• Manage the security of data and ensure compliance with data protection regulations and best practices.
• Respond to and resolve security incidents and breaches.
• Develop and implement incident response plans to minimize the impact of security incidents.
• Maintain relationships with security vendors and ensure that contracts properly support Sehati's security needs.
• Evaluate and select security solutions and services from vendors.
• Create and maintain detailed documentation of security policies, procedures, and incidents.
• Identifying potential security risk and vulnerabilities.
• Manage security controls such as FW and ASM.
• Monito and analyze events to detect and respond to security breaches.
• Assist in integrating security measures into infrastructure and applications.

5. Competencies (Knowledge, Skills, Abilities, and Behaviors)

• Proficiency in security tools and technologies, such as firewalls, intrusion detection systems, and encryption software.
• Knowledge of security standards and best practices, such as ISO 27001, NIST, and CIS Controls.
• Strong analytical skills to identify and diagnose security issues.
• Ability to develop effective solutions to address security challenges.
• Strong communication skills (written and verbal) to effectively interact with a range of people.

6. Qualifications & Experience

Minimum Qualifications:

• Bachelor's degree in computer information system, computer science, computer engineering, or equivalent.
• Preferred master's degree in business. computer information system, computer science, computer engineering, or equivalent.
• 2 years of experience in a similar field.