Operations and Security Engineer

arabic; Riyadh; On-site; SAR 240,000 - 360,000; Full time

Job summary

arabic is seeking a security operations and cloud security professional to monitor platforms, respond to incidents, and enforce robust controls across Linux/Windows servers and cloud services.

The role covers vulnerability management, IAM, API security, SIEM, backups, DR planning, and incident response, with emphasis on auditable processes and compliance in a dynamic environment.

Qualifications

• Linux and Windows server administration on public and sovereign clouds.
• Administration of at least two tools (Qlik Sense, Talend, Dataiku, MS SQL Server) plus GCP services.
• Monitoring and alerting with Cloud Logging/Monitoring, Prometheus and Grafana; runbooks.
• Incident management: triage, escalation, root-cause reports.
• Identity and access: IAM, MFA, RBAC, SSO integration.
• Encryption at rest and in transit; key management and certificates.
• Vulnerability scanning, patching and hardening; endpoint protection tooling.
• SIEM integration and audit-log design.
• API gateways, OAuth 2.0, OWASP API Security Top Ten.
• Backup, restore, business continuity and disaster recovery in cloud.

Responsibilities

• Monitor the platform around the clock, respond to alerts, troubleshoot, fix and restore service.
• Handle emergencies inside or outside office hours, and turn around any report the client asks.
• Patch, harden and run regular vulnerability reviews on every component; keep endpoint protection compatible.
• Implement and operate the security controls: identity and access with MFA, RBAC and single sign-on; encryption everywhere; separated dev, test and production; signed and verified automation code; file-type whitelisting; mobile-device restrictions.
• Run security logging, audit logs and the SIEM integration; protect logs from tampering.
• Secure the APIs: gateway, OAuth 2.0, OWASP API security.
• Own backups, business continuity and disaster recovery, and test them.
• Run incident response: immediate notification, an initial report within 24 hours, documented procedures with SLAs and escalation.
• Write the security architecture and API design documents and the infrastructure parts of the architecture pack, and the bi-monthly operations report.

Skills

Linux admin

Windows admin

SIEM

Incident management

IAM

RBAC

OAuth 2.0

Prometheus

Grafana

Cloud monitoring

Education

Bachelor's degree in CS/IT

Tools

Prometheus

Grafana

CI/CD

Cloud Logging

Job description

What you will do

• Monitor the platform around the clock, respond to alerts, troubleshoot, fix and restore service.

• Handle emergencies inside or outside office hours, and turn around any report the client asks

• Patch, harden and run regular vulnerability reviews on every component; keep endpoint protection compatible.

• Implement and operate the security controls: identity and access with MFA, RBAC and single sign-on; encryption everywhere; separated dev, test and production; signed and verified automation code; file-type whitelisting; mobile-device restrictions.

• Run security logging, audit logs and the SIEM integration; protect logs from tampering.

• Secure the APIs: gateway, OAuth 2.0, OWASP API security.

• Own backups, business continuity and disaster recovery, and test them.

• Run incident response: immediate notification, an initial report within 24 hours, documented procedures with SLAs and escalation.

• Write the security architecture and API design documents and the infrastructure parts of the architecture pack, and the bi-monthly operations report.

What you need

• Linux and Windows server administration on public and sovereign clouds (GCP, OCI, Deem or similar)

• Administration of at least two of Qlik Sense, Talend, Dataiku and MS SQL Server, plus GCP services

• Monitoring and alerting (Cloud Logging and Monitoring, Prometheus and Grafana or similar) and runbooks

• Incident management: triage, escalation, root-cause reports

• Identity and access: IAM, MFA, RBAC, SSO integration

• Encryption at rest and in transit, key management, certificates

• Vulnerability scanning, patching and hardening; working with endpoint-protection tools

• SIEM integration and audit-log design

• API gateways, OAuth 2.0, OWASP API Security Top Ten

• Backup, restore, business continuity and disaster recovery in the cloud

Good to have

• Terraform and CI/CD; SRE practice (SLOs, error budgets, cost alerts)

• MS SQL Server DBA depth

• Google Professional Cloud Security Engineer, CISSP, CCSP or ITIL

• Experience with national cybersecurity-control audits