Senior Network Security Engineer – ISO/NIST Focus

AECOM Middle East Ltd; Riyadh; On-site; SAR 223,000 - 357,000; Full time

Job summary

AECOM Middle East Ltd in Riyadh is seeking a Security and ICT Engineer - Network Protection to safeguard critical ICT infrastructure and drive resilient, secure network architectures. You will lead vulnerability assessments, firewall configuration, IDS/IPS operations, and incident response to reduce risk.

The role requires expertise in ISO 27001, NIST alignment, security audits, and ongoing collaboration with IT teams to maintain compliance and strengthen cyber defenses across digital

Qualifications

• At least 10 years of professional experience in network security or ICT infrastructure management.
• Experience with firewalls, intrusion detection and prevention platforms, and security appliances.
• Familiarity with ISO 27001, NIST, and related security frameworks.

Responsibilities

• Design and maintain secure ICT infrastructure and network environments.
• Develop network security architectures that protect critical systems, services, and data.
• Configure and administer firewalls, IDS/IPS, and other protection technologies.
• Conduct vulnerability assessments across networks, systems, and applications.
• Perform or coordinate penetration testing to identify weaknesses.
• Monitor security alerts, logs, and network traffic for anomalies.
• Investigate security incidents and coordinate containment actions.
• Support incident response, recovery, and post-incident analysis.
• Align security controls with ISO 27001, NIST, and applicable frameworks.
• Maintain documentation for security configurations and remediation actions.

Skills

Network security

Vulnerability assessment

Firewall configuration

Incident response

ISO 27001

NIST

Security audits

Threat monitoring

Security controls

Patch management

Network segmentation

Job description

AECOM Middle East Ltd in Riyadh is seeking a Security and ICT Engineer - Network Protection to safeguard critical ICT infrastructure and drive resilient, secure network architectures. You will lead vulnerability assessments, firewall configuration, IDS/IPS operations, and incident response to reduce risk.

The role requires expertise in ISO 27001, NIST alignment, security audits, and ongoing collaboration with IT teams to maintain compliance and strengthen cyber defenses across digital