Security and ICT Engineer - Network Protection

AECOM Middle East Ltd; Riyadh; On-site; SAR 223,000 - 357,000; Full time

Job summary

AECOM Middle East Ltd in Riyadh is seeking a Security and ICT Engineer - Network Protection to safeguard critical ICT infrastructure and drive resilient, secure network architectures. You will lead vulnerability assessments, firewall configuration, IDS/IPS operations, and incident response to reduce risk.

The role requires expertise in ISO 27001, NIST alignment, security audits, and ongoing collaboration with IT teams to maintain compliance and strengthen cyber defenses across digital

Qualifications

• At least 10 years of professional experience in network security or ICT infrastructure management.
• Experience with firewalls, intrusion detection and prevention platforms, and security appliances.
• Familiarity with ISO 27001, NIST, and related security frameworks.

Responsibilities

• Design and maintain secure ICT infrastructure and network environments.
• Develop network security architectures that protect critical systems, services, and data.
• Configure and administer firewalls, IDS/IPS, and other protection technologies.
• Conduct vulnerability assessments across networks, systems, and applications.
• Perform or coordinate penetration testing to identify weaknesses.
• Monitor security alerts, logs, and network traffic for anomalies.
• Investigate security incidents and coordinate containment actions.
• Support incident response, recovery, and post-incident analysis.
• Align security controls with ISO 27001, NIST, and applicable frameworks.
• Maintain documentation for security configurations and remediation actions.

Skills

Network security

Vulnerability assessment

Firewall configuration

Incident response

ISO 27001

NIST

Security audits

Threat monitoring

Security controls

Patch management

Network segmentation

Job description

Security and ICT Engineer - Network Protection in Riyadh, Saudi Arabia is a Computer and Network Security opportunity focused on safeguarding ICT infrastructure, strengthening network resilience, and maintaining compliance with recognized cybersecurity standards. AECOM is hiring an experienced security engineer to manage secure network architecture, vulnerability assessment, firewalls, intrusion prevention, incident response, security audits, data protection, and technical risk controls across critical digital environments.

Job Details

Country: Saudi Arabia

City: Riyadh

Industry: Computer and Network Security

Function: Computer-Network Security

Salary: 20000-32000 Estimated salary range based on similar jobs in the job city; please confirm the final offer with the employer.

Gender: Any

Nationality: Any

Job Type: Full-time

Role Context The Security and ICT Engineer will protect business-critical systems by combining network engineering, cybersecurity controls, continuous monitoring, and structured risk management. The role requires a strong understanding of how ICT infrastructure is designed, operated, and secured against evolving internal and external threats. A core responsibility is to reduce security exposure before incidents occur. This includes vulnerability assessment, penetration testing, firewall configuration, intrusion detection, patch coordination, and regular review of security controls against established frameworks such as ISO 27001 and NIST. The position also supports operational resilience by responding to security events, documenting remediation activities, and maintaining evidence for compliance and audit requirements. Close collaboration with IT teams and technical stakeholders will help ensure that security is embedded into infrastructure changes rather than treated as a separate activity.

Key Responsibilities

• Design and maintain secure ICT infrastructure and network environments.
• Develop network security architectures that protect critical systems, services, and data.
• Configure and administer firewalls, intrusion detection systems, and intrusion prevention technologies.
• Conduct vulnerability assessments across network devices, systems, and applications.
• Perform or coordinate penetration testing to identify exploitable weaknesses.
• Analyze vulnerability findings and prioritize remediation according to business risk.
• Monitor network traffic, system logs, and security alerts for suspicious activity.
• Investigate potential security incidents and determine appropriate containment actions.
• Support incident response, recovery, and post-incident technical analysis.
• Maintain documented procedures for security escalation and remediation.
• Develop and enforce security policies, protocols, and technical standards.
• Align security controls with ISO 27001, NIST, and other applicable frameworks.
• Conduct security audits and evaluate compliance with internal and external requirements.
• Maintain accurate records of security configurations, incidents, findings, and corrective actions.
• Coordinate security patches, system updates, and infrastructure improvements with IT teams.
• Review network architecture and identify opportunities to strengthen segmentation and access controls.
• Apply data protection and encryption technologies to sensitive information and communications.
• Troubleshoot network security and ICT infrastructure issues.
• Investigate authentication, connectivity, firewall, and access-related problems.
• Support secure configuration of servers, endpoints, networking devices, and security appliances.
• Assess emerging cyber threats and recommend practical preventive measures.
• Evaluate security tools and technologies against operational requirements.
• Support risk assessments for new systems, infrastructure changes, and technical projects.
• Maintain awareness of cybersecurity regulations and market requirements relevant to Saudi Arabia.
• Assist with security compliance documentation and audit evidence.
• Provide security guidance to technical teams and end-users.
• Promote appropriate password, access, data handling, and cyber hygiene practices.
• Support deployment and operation of SIEM platforms where applicable.
• Review SIEM alerts and assist with event correlation and investigation.
• Apply automation or scripting where appropriate to improve repetitive security processes.
• Contribute to cloud security assessments and infrastructure protection where required.
• Maintain clear technical documentation for network and security architecture.
• Work independently on assigned security priorities while collaborating across multidisciplinary technical teams.

Ideal Profile

Candidates should bring at least 10 years of professional experience in network security, cybersecurity engineering, ICT infrastructure management, or a closely related technical field. A strong understanding of network architecture, system administration, security protocols, and infrastructure protection is essential. The successful candidate should be comfortable working with firewalls, intrusion detection and prevention platforms, security appliances, vulnerability scanning solutions, and diagnostic tools. Practical knowledge of ISO 27001, NIST, and comparable security frameworks is required. Candidates should be capable of translating framework requirements into operational controls rather than treating compliance as a documentation-only exercise. Experience in vulnerability assessment, security scanning, penetration testing, incident response, and technical troubleshooting is important. Knowledge of data encryption, access control, and information protection technologies is also expected. Preferred professional certifications include CISSP, CEH, Security , CompTIA Security , or other recognized cybersecurity credentials. Experience with SIEM platforms, cloud security, automation tools, and scripting languages will provide additional value. Familiarity with cybersecurity regulations and compliance expectations within Saudi Arabia is also desirable. Strong analytical ability, disciplined documentation, and careful attention to technical detail are essential. The role requires someone who can investigate complex security issues methodically and communicate remediation requirements clearly to both technical and non-technical stakeholders.

Skills Set

Computer-Network Security ICT infrastructure Network security Cybersecurity engineering Network architecture System administration Firewalls Intrusion detection systems Intrusion prevention systems IDS IPS Vulnerability assessment Penetration testing Security scanning Incident response Security monitoring Network traffic analysis System log analysis SIEM ISO 27001 NIST Security frameworks Security audits Risk assessment Security compliance Data protection Encryption Access control Network segmentation Security configuration Patch management Threat detection Threat analysis Security incident investigation Security remediation Cybersecurity documentation Security policies Technical standards Cloud security Cloud infrastructure protection Scripting Security automation System hardening Security appliances ICT troubleshooting Cyber risk management Audit preparation Saudi cybersecurity regulations CISSP CEH Security CompTIA Security Technical support Security awareness Digital infrastructure protection

Why Join Us

Riyadh 's expanding digital and infrastructure landscape is increasing demand for experienced cybersecurity and ICT professionals who can protect interconnected systems while supporting complex engineering and operational environments. This position offers the opportunity to work across network security, risk management, compliance, and digital infrastructure protection within major project settings. AECOM provides access to multidisciplinary technology, engineering, and project teams where cybersecurity increasingly influences resilience, information management, and digital delivery. The experience can support career progression toward cybersecurity architecture, ICT security leadership, information security management, risk and compliance, or enterprise security roles.

About the Company

AECOM is a global infrastructure consulting firm delivering planning, design, engineering, program management, and construction management services across buildings, transportation, water, energy, and environmental sectors. Its multidisciplinary teams combine technical engineering, digital technologies, and project delivery expertise to support complex public and private sector projects in Saudi Arabia and international markets.