Security and ICT Engineer

AECOM; Riyadh; On-site; SAR 420,000 - 650,000; Full time

Job summary

AECOM in Riyadh, Saudi Arabia is seeking a detail-oriented Security and ICT Engineer to design, implement, and maintain secure ICT infrastructure, protecting critical systems and data while ensuring compliance with standards. You will lead vulnerability assessments, configure firewalls, develop policies, monitor incidents, and collaborate with IT teams on patches and improvements.

This on-site role requires 10+ years of experience and familiarity with Saudi market requirements.

Qualifications

• 10+ years of experience in network security and ICT infrastructure management.
• Strong knowledge of security protocols, standards, and frameworks (ISO 27001, NIST, etc.).
• Proficiency with firewall technologies, intrusion detection/prevention systems, and security tools.
• Experience with vulnerability assessment and security scanning tools.
• Solid understanding of system administration and network architecture.
• Demonstrated experience in incident response and security troubleshooting.
• Knowledge of data protection and encryption technologies.
• Excellent analytical and problem-solving skills with strong attention to detail.
• Ability to work independently and collaboratively within technical teams.

Responsibilities

• Design, implement, and maintain secure ICT infrastructure and network systems.
• Conduct comprehensive security vulnerability assessments and penetration testing to identify potential risks.
• Configure and manage firewalls, intrusion detection systems, and other security appliances.
• Develop and enforce security policies, procedures, and protocols aligned with industry standards.
• Monitor network traffic and system logs to detect and respond to security incidents.
• Perform regular security audits and ensure compliance with relevant regulations and frameworks.
• Troubleshoot and resolve ICT and security-related issues in a timely and efficient manner.
• Collaborate with IT teams to implement security patches, updates, and system improvements.
• Document security configurations, incidents, and remediation actions for audit and compliance purposes.
• Stay current with emerging security threats and recommend preventive measures.
• Provide technical support and guidance to end-users regarding security best practices.

Skills

10+ years experience

ISO27001/NIST

Firewalls/IDS/IPS

Vulnerability scanners

System administration

Incident response

Data protection

Tools

SIEM systems

Vulnerability scanners

Firewall technologies

IDS/IPS

Job description

Company Description

Work with Us. Change the World.

At AECOM, we're delivering a better world. Whether improving your commute, keeping the lights on, providing access to clean water, or transforming skylines, our work helps people and communities thrive. We are the world's trusted infrastructure consulting firm, partnering with clients to solve the world’s most complex challenges and build legacies for future generations.

There has never been a better time to be at AECOM. With accelerating infrastructure investment worldwide, our services are in great demand. We invite you to bring your bold ideas and big dreams and become part of a global team of over 50,000 planners, designers, engineers, scientists, digital innovators, program and construction managers and other professionals delivering projects that create a positive and tangible impact around the world.

We're one global team driven by our common purpose to deliver a better world. Join us.

Job Description

We are seeking a detail-oriented and analytical Security and ICT Engineer to join our organization in Riyadh, Saudi Arabia. In this role, you will be responsible for designing, implementing, and maintaining secure information and communication technology infrastructure. You will work to protect our organization's critical systems and data while ensuring compliance with industry security standards and regulations. The successful candidate will demonstrate strong technical expertise, organized problem-solving abilities, and a commitment to maintaining the highest security standards.

• Design, implement, and maintain secure ICT infrastructure and network systems
• Conduct comprehensive security vulnerability assessments and penetration testing to identify potential risks
• Configure and manage firewalls, intrusion detection systems, and other security appliances
• Develop and enforce security policies, procedures, and protocols aligned with industry standards
• Monitor network traffic and system logs to detect and respond to security incidents
• Perform regular security audits and ensure compliance with relevant regulations and frameworks
• Troubleshoot and resolve ICT and security-related issues in a timely and efficient manner
• Collaborate with IT teams to implement security patches, updates, and system improvements
• Document security configurations, incidents, and remediation actions for audit and compliance purposes
• Stay current with emerging security threats and recommend preventive measures
• Provide technical support and guidance to end-users regarding security best practices

Qualifications

Required Qualifications

• Proven 10 years of experience or more in network security and ICT infrastructure management
• Strong knowledge of security protocols, standards, and frameworks (ISO 27001, NIST, etc.)
• Proficiency with firewall technologies, intrusion detection/prevention systems, and security tools
• Experience with vulnerability assessment and security scanning tools
• Solid understanding of system administration and network architecture
• Demonstrated experience in incident response and security troubleshooting
• Knowledge of data protection and encryption technologies
• Excellent analytical and problem-solving skills with strong attention to detail
• Ability to work independently and collaboratively within technical teams

Preferred Qualifications

• Security certifications such as CISSP, CEH, Security+, or CompTIA Security+ Experience with cloud security and cloud infrastructure protection
• Knowledge of scripting languages or automation tools for security tasks
• Experience with security information and event management (SIEM) systems
• Background in risk assessment and security compliance auditing
• Familiarity with regulatory requirements specific to the Saudi Arabian market

Additional Information

At AECOM, we are committed to maintaining a secure and trustworthy recruitment process and take any fraudulent hiring activity seriously.

To support this commitment, all newly hired employees are required to attend an in-person Day 1 onboarding at an AECOM office location as a condition of employment.

About AECOM

AECOM is proud to offer comprehensive benefits to meet the diverse needs of our employees. Depending on your employment status, AECOM benefits may include medical, dental, vision, life, AD&D, disability benefits, paid time off, leaves of absences, voluntary benefits, perks, flexible work options, well-being resources, employee assistance program, business travel insurance, service recognition awards, retirement savings plan, and employee stock purchase plan.

AECOM is the global infrastructure leader, committed to delivering a better world. As a trusted professional services firm powered by deep technical abilities, we solve our clients’ complex challenges in water, environment, energy, transportation and buildings. Our teams partner with public- and private-sector clients to create innovative, sustainable and resilient solutions throughout the project lifecycle – from advisory, planning, design and engineering to program and construction management. AECOM is a Fortune 500 firm that had revenue of $16.1 billion in fiscal year 2025. Learn more at aecom.com.

What makes AECOM a great place to work

You will be part of a global team that champions your growth and career ambitions. Work on groundbreaking projects - both in your local community and on a global scale - that are transforming our industry and shaping the future. With cutting-edge technology and a network of experts, you’ll have the resources to make a real impact. Our award-winning training and development programs are designed to expand your technical expertise and leadership skills, helping you build the career you’ve always envisioned. Here, you’ll find a welcoming workplace built on respect, collaboration and community - where you have the freedom to grow in a world of opportunity.

As an Equal Opportunity Employer, we believe in your potential and are here to help you achieve it. All your information will be kept confidential according to EEO guidelines.

ReqID: J10158803

Business Line: B&P - Buildings & Places

Business Group: DCS

Strategic Business Unit: ME and Africa

Career Area: Engineering

Work Location Model: On-Site