Security Architecture Analyst - On-Site Riyadh

NourNet; Riyadh; On-site; SAR 300,000 - 420,000; Full time

Job summary

NourNet is seeking an experienced Security Architecture Analyst to join their cybersecurity and enterprise architecture function in Riyadh. This on-site role ensures projects follow secure-by-design standards and regulatory requirements.

You will lead security architecture reviews, develop patterns, and integrate security into DevSecOps, working with SOC, GRC, and EA teams to govern solution designs.

Qualifications

• 7+ years of experience in security architecture and enterprise security frameworks.
• Strong expertise in cloud security (OCI preferred), microservices, API security, and data protection.
• Deep knowledge of network segmentation, IAM, encryption, and secure third‑party integration.
• Experience integrating security into DevOps/CI-CD pipelines.
• Strong documentation and architectural governance discipline.

Responsibilities

• Conduct security architecture reviews for new projects and cloud deployments.
• Develop and maintain enterprise security design patterns and reference architectures.
• Define secure configurations for OCI services, IAM models, and key management.
• Embed security controls into CI/CD pipelines (SAST, dependency scanning, container security).
• Evaluate and select security technologies ensuring architectural alignment.
• Collaborate with SOC, GRC, and Enterprise Architecture teams on governance.
• Participate in architecture review boards and document decisions and risks.
• Produce architecture review reports, diagrams, and design rationales.

Skills

Security architecture

Cloud security

IAM

Encryption

API security

Data protection

DevOps integration

Architecture governance

Documentation

Job description

NourNet is seeking an experienced Security Architecture Analyst to join their cybersecurity and enterprise architecture function in Riyadh. This on-site role ensures projects follow secure-by-design standards and regulatory requirements.

You will lead security architecture reviews, develop patterns, and integrate security into DevSecOps, working with SOC, GRC, and EA teams to govern solution designs.