IT and Enterprise Cybersecurity Engineer

Optimal; Dhahran Compound; On-site; SAR 80,000 - 120,000; Full time

Job summary

Optimal is seeking an IT and Enterprise Cybersecurity Engineer in Dhahran Compound, Eastern Province, Saudi Arabia. This role involves designing and maintaining secure IT environments, developing cybersecurity strategies, and ensuring compliance with standards.

The ideal candidate will have a Bachelor’s degree in Cybersecurity or related fields, at least 4 years of experience, and relevant certifications. Strong skills in SIEM, network security, and incident response are essential.

Qualifications

• Minimum 4 years of IT/enterprise cybersecurity experience.
• CISSP, CISM, CEH, CompTIA Security+, or equivalent certification is required.
• Hands-on experience with SIEM platforms and endpoint detection.

Responsibilities

• Design, implement, and maintain enterprise IT security architecture.
• Develop and enforce cybersecurity policies aligned with ISO 27001.
• Perform risk assessments, vulnerability scanning, and penetration testing.
• Monitor enterprise systems using SIEM platforms.

Skills

Proficiency with SIEM platforms

Network security

Vulnerability management

Identity and access management

Incident response planning

Education

Bachelor's degree in Cybersecurity, Computer Engineering, Information Technology, or Network Engineering

Tools

SIEM platforms (Splunk, Microsoft Sentinel)

Cloud security (Azure or AWS)

Job description

IT and Enterprise Cybersecurity Engineer

Responsible for designing, implementing, and maintaining secure IT and enterprise network environments. Develops cybersecurity strategies, policies, and technical controls aligned with ISO 27001 and NIST frameworks to protect OSCO and client information assets from internal and external threats.

Job Description and Responsibilities

• Design, implement, and maintain enterprise IT security architecture including network security, cloud security, and endpoint protection.
• Develop and enforce cybersecurity policies, standards, and procedures aligned with ISO 27001 and NIST Cybersecurity Framework.
• Perform risk assessments, vulnerability scanning, and penetration testing to identify and prioritize security risks.
• Monitor enterprise systems using SIEM platforms and manage security alerts, triage, and escalation.
• Handle incident detection, investigation, response, and recovery activities.
• Manage identity and access control, directory services, and privileged access management (PAM).
• Oversee system hardening, patch management, and secure configuration baselines across enterprise IT infrastructure.
• Conduct security awareness training and phishing simulation exercises.
• Support ISO 27001 certification and audit readiness activities.
• Collaborate with IT, operations, and compliance teams to maintain a secure and compliant infrastructure.

Basic Qualifications

• Bachelor's degree in Cybersecurity, Computer Engineering, Information Technology, or Network Engineering.
• Minimum 4 years of IT/enterprise cybersecurity experience.
• CISSP, CISM, CEH, CompTIA Security+, or equivalent certification is required.
• Hands‑on experience with SIEM platforms, endpoint detection, and enterprise firewall administration.
• Experience with cloud security (Azure or AWS) is an advantage.

SKILLS AND COMPETENCIES

• Proficiency with SIEM platforms (Splunk, Microsoft Sentinel, or equivalent).
• Network security and enterprise firewall administration experience.
• Vulnerability management and penetration testing skills.
• Identity and access management, including PAM solutions.
• Strong knowledge of ISO 27001, NIST CSF, and related frameworks.
• Incident response planning and execution capability.