Senior Network & Email Security Engineer – Cyber Defense Specialist (5+ Years)

CBT; Riyadh; On-site; SAR 350,000 - 520,000; Full time

Benefits offered by this job

Exposure to advanced cybersecurity technologies

Strong career growth opportunities

Job summary

A leading global consulting firm in Riyadh is hiring a Senior Network & Email Security Engineer. This position involves maintaining enterprise security operations, focusing on network and email security, and responding to incidents. Candidates should have over 5 years of relevant experience, with expertise in Palo Alto firewalls and secure email gateways. Join a team dedicated to operational excellence and compliance in a highly regulated environment.

Qualifications

• 5+ years of experience in enterprise network and email security operations.
• Hands-on experience with NGFW platforms (preferably Palo Alto).
• Experience with Secure Email Gateways (e.g., Proofpoint or equivalent).
• Strong understanding of incident and change management processes.
• Packet analysis and SSL decryption fundamentals.
• English communication; Arabic is a plus.

Responsibilities

• Perform daily health checks for Next-Generation Firewall (NGFW) environments.
• Manage and optimize Secure Email Gateway policies.
• Lead the response to high-priority security incidents.
• Develop and maintain SOPs for operational processes.
• Manage and optimize Secure Email Gateway policies for inbound/outbound email protection.
• Lead and coordinate response to high-priority security incidents (P1).
• Collaborate with SOC on SIEM alerts and playbooks.
• Prepare CAB-ready change requests with impact analysis and rollback plans.
• Perform post-change validation and documentation updates.

Skills

Network security operations

Email security management

Incident response

Compliance documentation

Communication skills

SSL decryption

English communication

Tools

Palo Alto NGFW

Secure Email Gateway

SIEM/SOAR platforms

Job description

Senior Network & Email Security Engineer – Cyber Defense Specialist (5+ Years)

Job Openings Senior Network & Email Security Engineer – Cyber Defense Specialist (5+ Years)

About the job Senior Network & Email Security Engineer – Cyber Defense Specialist (5+ Years)

Senior Network & Email Security Engineer – Cyber Defense Specialist (5+ Years)

Location: Riyadh, Saudi Arabia (On-site)
Employment Type: Full-Time
Eligibility: Saudi Nationals Only
Company: One of the Global Big 5 Consulting Firms

About the Role

We are seeking a highly skilled Senior Network & Email Security Engineer to join a leading Big 5 consulting firm, supporting a mission-critical, enterprise-scale environment within a regulated sector.

This role is responsible for maintaining a hardened network perimeter and securing enterprise email systems, ensuring operational excellence, audit readiness, and stability across all security controls. You will own day-to-day operations, incident response, and change governance across network and email security platforms.

Key Responsibilities

Network Security Operations

• Perform daily health checks for Next-Generation Firewall (NGFW) environments, including cluster status, updates, licensing, and HA synchronization
• Maintain and optimize firewall rulebases by removing unused or redundant rules and enforcing least privilege access
• Ensure proper configuration of security profiles (IPS, Anti-Virus, URL Filtering, Threat Prevention)
• Manage remote access solutions (e.g., VPN), ensuring secure configurations and seamless user experience
• Troubleshoot traffic and connectivity issues using logs, packet capture (PCAP), and policy simulations

Email Security Operations

• Manage and optimize Secure Email Gateway policies for inbound and outbound email protection
• Strengthen defenses against phishing, BEC (Business Email Compromise), and impersonation attacks
• Oversee URL rewriting, sandboxing, and attachment detonation processes
• Manage quarantine workflows, user notifications, and false positive/negative handling
• Collaborate with messaging teams on SPF, DKIM, and DMARC alignment and email delivery health
• Lead and coordinate response to high-priority (P1) security incidents
• Work closely with SOC teams to analyze SIEM alerts and execute response playbooks
• Implement rapid containment measures (blocking rules, sender controls, sandbox verdicts)
• Conduct root cause analysis (RCA) and implement corrective and preventive actions
• Prepare CAB-ready change requests with full impact analysis, testing plans, and rollback strategies
• Execute firmware upgrades, signature updates, and policy changes
• Perform post-change validation and ensure proper documentation

Compliance & Audit Readiness

• Maintain comprehensive, audit-ready documentation including change records, policy exports, logs, and incident reports
• Ensure alignment with regulatory frameworks such as SAMA and NCA Cybersecurity Framework (CSF)
• Support internal and external audits with clear, traceable evidence and reporting

Documentation & Knowledge Transfer

• Develop and maintain SOPs and runbooks for operational processes and incident handling
• Mentor junior engineers (L1/L2) and support knowledge transfer initiatives
• Drive continuous improvement in operational practices and documentation standards

Technology Environment

• Network Security: NGFW (Palo Alto or equivalent), VPN (site-to-site & remote access), IPS, URL filtering, sandboxing, SSL decryption, HA/failover
• Email Security: Secure Email Gateway (Proofpoint or equivalent), phishing/BEC protection, sandboxing, quarantine management
• Monitoring & Integration: SIEM/SOAR platforms, log analysis, threat intelligence integration

Candidate Profile

Required Qualifications

• 5+ years of experience in enterprise network and email security operations
• Hands-on experience with NGFW platforms (preferably Palo Alto)
• Experience with Secure Email Gateways (e.g., Proofpoint or equivalent)
• Strong understanding of incident and change management processes
• Proficiency in packet analysis, SSL decryption concepts, and email flow fundamentals
• Strong communication and reporting skills (English required, Arabic is a plus)

Preferred Qualifications

• Experience in banking or regulated environments
• Familiarity with SIEM/SOAR integrations and security automation
• Relevant certifications (e.g., PCNSE, email security certifications, ITIL)

Success Metrics (First 90–180 Days)

• Improved firewall rulebase hygiene with reduced redundancy and full security profile coverage
• High availability stability with zero unplanned failovers
• VPN performance aligned with defined SLAs and MFA enforcement
• Measurable reduction in phishing/BEC incidents and improved email security effectiveness
• Timely delivery of audit-ready documentation and successful internal audit validation

Working Model

• On-site at client premises in Riyadh (Sunday–Thursday)
• On-call support required for critical incidents (P1) and planned changes

Why Join This Opportunity

• Be part of one of the world’s leading Big 5 consulting firms
• Work in a highly secure, regulated, enterprise-scale environment
• Exposure to advanced cybersecurity technologies and threat landscapes
• Opportunity to lead critical security operations with real business impact
• Strong career growth within cybersecurity and consulting domains