L3 Network Security Engineer – Network Security Device Management (m/f/d)

Halian; Riyadh; On-site; SAR 120,000 - 150,000; Full time

Job summary

A technology solutions provider is seeking an experienced L3 Network Security Engineer in Riyadh. This role involves advanced support and management of various network security technologies including SSL inspection and firewalls. The ideal candidate will have a Bachelor’s degree and a minimum of 7 years of experience in network security. Responsibilities include incident response, configuration management, and mentoring junior staff. The position offers full-time hours with potential on-call duties.

Benefits

Standard 9x5 work hours

Potential on-call responsibilities

Professional development opportunities

Qualifications

• Minimum of 7 years of experience in network security engineering.
• Demonstrated expertise in managing various security technologies.
• Excellent analytical and problem-solving skills.

Responsibilities

• Act as the final escalation point for complex incidents.
• Oversee maintenance of network security technologies.
• Lead incident response during critical security events.

Skills

Advanced troubleshooting

Incident response coordination

Security policy development

Analytical skills

Communication skills

Education

Bachelor’s degree in Computer Science or related field

Tools

SSL Inspection (Gigamon)

VPN (Palo Alto, F5)

Web Proxy (ForcePoint)

Firewalls (Palo Alto, Cisco, Fortinet)

DDoS Protection (Arbor)

Advanced Threat Protection (FireEye NX)

Intrusion Prevention Systems (Cisco, Trilex)

Email Security (Cisco Iron Port, FireEye EX)

Job description

Job Title: L3 Network Security Engineer – Network Security Device Management

Job Summary: The L3 Network Security Engineer is responsible for advanced support, configuration, and management of a wide array of network security technologies, including:

• SSL Inspection (Gigamon)
• Virtual Private Network (Palo Alto, F5)
• Web Proxy (ForcePoint)
• Firewalls (Palo Alto, Cisco, Fortinet)
• DDoS Protection (Arbor)
• Advanced Threat Protection (FireEye NX)
• Intrusion Prevention Systems (Cisco, Trilex)
• Email Security (Cisco Iron Port, FireEye EX, ForcePoint ESG, Trend Micro Scan-Mail)

This role serves as the final escalation point for complex incidents, leads incident response efforts, and provides expert guidance to optimize security and performance across all managed technologies.

Key Responsibilities

• Advanced Support & Escalation Management:
  • Act as the final escalation point for complex incidents affecting all network security technologies.
  • Conduct comprehensive troubleshooting and root cause analysis, implementing corrective actions and enhancements.
• Configuration, Optimization & Maintenance:
  • Oversee the configuration, tuning, and maintenance of SSL Inspection, VPN, Web Proxy, Firewall, DDoS, Advanced Threat Protection, Intrusion Prevention, and Email Security solutions.
  • Develop and enforce best practices and security policies for device configurations.
• Incident Response & Reporting:
  • Lead incident response during critical security events and coordinate with relevant teams for rapid resolution.
  • Prepare detailed post‑incident reports and contribute to continuous improvement initiatives.
• Technical Leadership & Mentorship:
  • Mentor L2 engineers and junior staff, providing guidance and developing best practice documentation.
  • Participate in technology reviews, risk assessments, and security audits.
• Collaboration & Strategy:
  • Work closely with network, IT, and security teams to design and implement robust security architectures.
  • Recommend and implement technology upgrades and process improvements to strengthen the overall security posture.

Required Qualifications

• Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, or a related field.
• Minimum of 7 years of experience in network security engineering with a focus on managing diverse security technologies.
• Demonstrated expertise in managing SSL Inspection (Gigamon), VPN (Palo Alto, F5), Web Proxy (ForcePoint), Firewalls (Palo Alto, Cisco, Fortinet), DDoS Protection (Arbor), Advanced Threat Protection (FireEye NX), Intrusion Prevention Systems (Cisco, Trilex), and Email Security (Cisco Iron Port, FireEye EX, ForcePoint ESG, Trend Micro Scan-Mail).
• Excellent analytical, problem‑solving, and communication skills.

Desired Skills & Certifications

• Advanced certifications such as CISSP, CISM, or equivalent.
• Vendor‑specific certifications (e.g., Palo Alto, F5, Cisco, Fortinet, Arbor, FireEye, ForcePoint) are highly desirable.
• Experience with ITIL processes, incident management, and change management.

Working Conditions

• Full‑time role with standard 9x5 hours and potential on‑call responsibilities.
• Fast‑paced, high‑pressure environment with global collaboration.
• Occasional extended hours during critical incidents or planned maintenance windows.

Halian Group

With over 28 years of experience, we have come to understand that innovation is the only way to provide agile, practical solutions that transform businesses and careers. Our resourcing and smart services help you to realize tomorrow’s potential. Discover the amazing things possible when you bring the right people and the right technologies together.

At Halian, we recognize that diversity, equity, and inclusion (DEI) are essential to building high‑performing teams for our clients. We are committed to connecting organizations with top talent from all backgrounds, ensuring that every individual feels valued, respected, and empowered to contribute their unique perspectives. We encourage applications from all qualified candidates, regardless of race, gender, disability, or any other characteristic that makes them unique. By fostering diverse and inclusive workplaces, we help our clients drive innovation, enhance collaboration, and better reflect the communities they serve.