IT Security Engineer

National Parcel Stations Network | Parcelat; Riyadh; On-site; SAR 96,000 - 144,000; Full time

Job summary

National Parcel Stations Network | Parcelat is seeking an IT Security Engineer to support security standard implementations, monitoring, and compliance for our IT systems and data. This entry-level role is ideal for graduates beginning a career in cybersecurity and learning under senior IT staff.

You will assist with security actions, vulnerability follow-ups, code scanning before deployments, and aligning with Saudi cybersecurity regulations while contributing to a security-conscious culture

Qualifications

• Bachelor's degree in a relevant field.
• Fresh graduate or up to 2 years of experience in Information Security, Cybersecurity, or IT.
• Certifications such as CompTIA Security+, CEH, ISO 27001 Foundation or equivalent are desirable.
• Basic understanding of governance, risk management, and compliance concepts.

Responsibilities

• Assist in implementing IT security standards and internal security policies.
• Support compliance activities related to Saudi cybersecurity regulations and internal requirements.
• Help maintain security documentation, checklists, and basic audit evidence.
• Coordinate with senior team members to follow up on required security actions.
• Monitor security alerts and elevate suspicious activities to senior IT team members.
• Assist in vulnerability scanning and follow up on remediation status.
• Support patching and corrective actions by tracking findings and sharing updates.
• Maintain security incident logs and coordinate with relevant teams for incident resolution.
• Secure all application and infrastructure layers, including web, backend, APIs, databases, and client applications.
• Perform basic code security scanning before deployments and report identified risks.
• Implement access control, authentication, encryption, and secure configurations.
• Collaborate with DevOps and Infra teams to ensure secure deployment of pipelines.
• Develop security guidelines, SOPs, and documentation.
• Conduct training sessions and workshops to raise awareness among internal users and technical teams.
• Promote a security-conscious culture across the organization.
• Work closely with Infra, DevOps, and Development teams for secure architecture and operations.
• Review and approve security measures for new tools, applications, and integrations.
• Advise on security requirements for new projects, features, or customer integrations.

Skills

Vulnerability management

Threat intelligence

Security monitoring

SIEM tools

Network security

Firewalls

VPNs

Encryption

IAM

Application security

SSDLC

Code scanning

Disaster recovery

Backup

English (Fluent)

Arabic (Preferred)

Education

Bachelor's degree in Computer Engineering, Computer Science, Cybersecurity, Information Technology, or related field

Job description

Job Description:

The IT Security Engineer supports the implementation of security standards, monitoring activities, and basic compliance requirements to help protect IT systems, applications, and data.

The IT Security Engineer supports the implementation of security standards, monitoring activities, and basic compliance requirements to help protect IT systems, applications, and data.

This role is suitable for a fresh graduate who will learn and assist in security awareness, code scanning before deployments, vulnerability follow-up, and applying Saudi cybersecurity regulations under the guidance of senior IT team members.

Responsibilities:

• Assist in implementing IT security standards and internal security policies
• Support compliance activities related to Saudi cybersecurity regulations and internal requirements
• Help maintain security documentation, checklists, and basic audit evidence
• Coordinate with senior team members to follow up on required security actions

Threat & Vulnerability Management:

• Monitor security alerts and elevate suspicious activities to senior IT team members
• Assist in vulnerability scanning and follow up on remediation status
• Support patching and corrective actions by tracking findings and sharing updates
• Maintain security incident logs and coordinate with relevant teams for incident resolution.

Application & Infrastructure Security:

• Secure all application and infrastructure layers, including web, backend, APIs, databases, and client applications.
• Perform basic code security scanning before deployments and report identified risks
• Implement access control, authentication, encryption, and secure configurations.
• Collaborate with DevOps and Infra teams to ensure secure deployment of pipelines.

Knowledge Management & Training:

• Develop security guidelines, SOPs, and documentation.
• Conduct training sessions and workshops to raise awareness among internal users and technical teams.
• Promote a security-conscious culture across the organization.

Collaboration & Technical Delivery:

• Work closely with Infra, DevOps, and Development teams for secure architecture and operations.
• Review and approve security measures for new tools, applications, and integrations.
• Advice on security requirements for new projects, features, or customer integrations.

Job Relations:

• Reports to: IT Infrastructure Lead / IT Manager
• Internal Relations: DevOps Engineer, Infra Engineer, QA, Development Teams, IT Support

External Communications:

• Communicate with regulators and auditors to ensure compliance and provide reports
• Liaise with external vendors for security assessments, penetration tests, and certifications
• Escalate critical security risks to IT leadership and management

Requirements

• Bachelor's degree in Computer Engineering, Computer Science, Cybersecurity, Information Technology, or related field
• Fresh graduate or up to 2 years of experience in Information Security, Cybersecurity, or IT.
• Relevant cybersecurity certifications or training, such as CompTIA Security+, CEH, ISO 27001 Foundation, or equivalent certifications.
• Basic understanding of security governance, risk management, and compliance concepts.

Knowledge of:

• Network and infrastructure security (Firewalls, VPNs, IDS/IPS).
• Application security (Web, APIs, Mobile Applications).
• Security monitoring and SIEM platforms.
• Backup, Disaster Recovery (DR), and Business Continuity concepts.
• Secure Software Development Lifecycle (SSDLC).
• Security code scanning and vulnerability management.
• Saudi cybersecurity regulations and frameworks (NCA ECC, PDPL, ISO 27001) awareness is preferred.

Competencies:

• Willingness to learn and develop technical security skills
• Risk-aware mindset with attention to detail
• Basic ability to understand security standards and translate them into daily operational tasks
• Collaboration and influence across technical and non-technical teams
• Proactive attitude toward security awareness, documentation, and continuous improvement

Skills & Languages:

• Vulnerability management, penetration testing, and threat intelligence
• Security monitoring and SIEM tools
• Network security, firewalls, VPNs, encryption, IAM
• Application security best practices
• Backup, disaster recovery, and business continuity planning
• Fluent in English (required)
• Arabic proficiency (preferred)