Senior Cybersecurity Engineer

Saudconsult; Riyadh; Vor Ort; SAR 260.000 - 380.000; Vollzeit

Zusammenfassung

Saudconsult seeks a Senior Cybersecurity Engineer to design, implement, and maintain security controls across IT infrastructure, networks, servers, endpoints and cloud services. You will monitor security events, lead investigations, manage firewall and vulnerability programs, and guide junior staff.

The role requires 5+ years in cybersecurity or related fields, strong knowledge of enterprise security architecture, and experience with SIEM/EDR.

Qualifikationen

• Bachelor's degree in Cybersecurity, CS, IT or related.
• 5+ years hands-on cybersecurity experience.
• Knowledge of TCP/IP, routing, switching, VLANs, VPNs, DNS.
• Experience with Fortinet FortiGate, SonicWall or Palo Alto.
• Experience investigating alerts, logs and incidents.
• Knowledge of SIEM, EDR/XDR, IDS/IPS and scanners.
• Understanding of Windows Server, AD, patching and MFA.
• Knowledge of incident response, threat intel and vuln mgmt.
• Ability to write technical reports and communicate risks.
• Preferred: Security+ / CySA+ / CISSP or firewall certs.
• Preferred: MS Sentinel, Splunk, QRadar.
• Preferred: Defender for Endpoint or similar EDR/XDR.
• Familiarity with MITRE ATT&CK, NIST CSF and ISO 27001.
• Cloud security, email security, DLP and automation.
• Experience in a multi-site enterprise environment.

Aufgaben

• Monitor security alerts, network traffic, firewall logs and endpoint security events to identify suspicious activities.
• Investigate and respond to cybersecurity incidents, including malware, phishing, ransomware, unauthorized access and compromised accounts.
• Configure, manage and troubleshoot enterprise firewalls, VPNs, IDS/IPS and network security policies.
• Operate SIEM and EDR/XDR platforms for threat detection, correlation and incident investigation.
• Perform vulnerability assessments, coordinate penetration testing and ensure remediation of identified vulnerabilities.
• Conduct threat hunting and analyze indicators of compromise (IOCs).
• Secure network infrastructure, servers, endpoints, cloud services and Microsoft 365 environments as applicable.
• Review firewall rules, access permissions, privileged accounts, MFA and security configurations.
• Develop and maintain incident response procedures, security policies, technical documentation and reports.
• Support security audits, risk assessments, business continuity and disaster recovery activities.
• Coordinate with IT, network, infrastructure and external security teams during incidents.
• Provide recommendations to management to reduce cybersecurity risks.

Kenntnisse

Threat detection

Security monitoring

Incident response

Firewall management

Vulnerability management

Ausbildung

Bachelor's degree in Cybersecurity, CS or IT

Tools

Fortinet FortiGate

SonicWall

Palo Alto Networks

Jobbeschreibung

We are seeking an experienced Senior Cybersecurity Engineer to safeguard the company’s IT infrastructure, networks, servers, endpoints, and business systems against evolving cyber threats. The ideal candidate brings strong hands-on experience in threat detection, security monitoring, incident response, firewall management, and vulnerability management, and will play a key role in strengthening our overall security posture.

Role Overview

As a Senior Cybersecurity Engineer, you will be responsible for designing, implementing, and maintaining security controls that protect the organization’s IT environment. You will monitor and analyze security events, lead investigations and incident response activities, manage firewall policies and network security configurations, and run vulnerability management programs from identification through remediation. You will also collaborate closely with IT, network, and business teams to embed security best practices across systems and projects, and provide technical guidance to junior team members.

Requirements

• Bachelor's degree in Cybersecurity, Computer Science, Information Technology or a related discipline.
• Minimum 5 years of hands-on experience in cybersecurity, security operations or network security.
• Strong knowledge of TCP/IP, routing, switching, VLANs, VPNs, DNS, network protocols and enterprise security architecture.
• Practical experience with enterprise firewalls such as Fortinet FortiGate, SonicWall, Palo Alto Networks or equivalent.
• Experience investigating security alerts, analyzing logs and handling security incidents.
• Working knowledge of SIEM, EDR/XDR, IDS/IPS, vulnerability scanners and endpoint protection.
• Understanding of Windows Server, Active Directory, identity security, patch management and MFA.
• Knowledge of incident response, threat intelligence, vulnerability management and security hardening.
• Ability to prepare technical reports, document incidents and communicate risks clearly.
• Strong analytical, troubleshooting and problem-solving skills.
• Preferred Qualifications: Relevant certification such as CompTIA Security+, CySA+, GCIH, CISSP or a firewall vendor certification.
• Preferred Qualifications: Experience with Microsoft Sentinel, Splunk, QRadar or similar SIEM platforms.
• Preferred Qualifications: Experience with Microsoft Defender for Endpoint or equivalent EDR/XDR solutions.
• Preferred Qualifications: Familiarity with penetration testing reports, MITRE ATT&CK, NIST Cybersecurity Framework and ISO 27001.
• Preferred Qualifications: Experience with cloud security, email security, DLP and security automation.
• Preferred Qualifications: Experience in a multi-site enterprise environment.

Key Responsibilities

• Monitor security alerts, network traffic, firewall logs and endpoint security events to identify suspicious activities.
• Investigate and respond to cybersecurity incidents, including malware, phishing, ransomware, unauthorized access and compromised accounts.
• Configure, manage and troubleshoot enterprise firewalls, VPNs, IDS/IPS and network security policies.
• Operate SIEM and EDR/XDR platforms for threat detection, correlation and incident investigation.
• Perform vulnerability assessments, coordinate penetration testing and ensure remediation of identified vulnerabilities.
• Conduct threat hunting and analyze indicators of compromise (IOCs).
• Secure network infrastructure, servers, endpoints, cloud services and Microsoft 365 environments as applicable.
• Review firewall rules, access permissions, privileged accounts, MFA and security configurations.
• Develop and maintain incident response procedures, security policies, technical documentation and reports.
• Support security audits, risk assessments, business continuity and disaster recovery activities.
• Coordinate with IT, network, infrastructure and external security teams during incidents.
• Provide recommendations to management to reduce cybersecurity risks.