Senior Security Engineer

Tamkeen Technologies; Riyadh; On-site; SAR 180,000 - 300,000; Full time

Job summary

You will collaborate with Cybersecurity Governance, IAM, SOC, and other teams to strengthen data protection, drive improvements, and ensure ongoing compliance with applicable standards.

Responsibilities

• Administer, maintain, monitor, and continuously improve enterprise MDM, DLP, and DRM solutions.
• Design, configure, implement, and tune data protection policies and technical controls based on information classification, data sensitivity, business requirements, risk, and regulatory obligations.
• Implement and maintain technical controls required to support compliance with applicable cybersecurity and regulatory requirements.
• Manage DLP controls across applicable channels to prevent unauthorized disclosure, transfer, or leakage of sensitive information.
• Administer DRM protections, including encryption, access permissions, usage restrictions, secure sharing, expiration, revocation, and persistent protection of sensitive information.
• Manage the MDM security lifecycle, including device enrollment, configuration, compliance policies, encryption, application controls, secure access, device restrictions, and decommissioning.
• Monitor and investigate data protection incidents, policy violations, abnormal activities, and non-compliant devices, and coordinate remediation and root-cause analysis.
• Review and optimize security policies, rules, exceptions, and enforcement actions to improve control effectiveness while minimizing false positives and unnecessary business impact.
• Integrate MDM, DLP, and DRM technologies with relevant enterprise platforms, including data classification, IAM, endpoint security, email, cloud services, and SIEM/SOC.
• Support cybersecurity assessments, regulatory reviews, and internal and external audits, including preparation and validation of required technical evidence.
• Perform periodic reviews to identify security gaps, control weaknesses, compliance gaps, and improvement opportunities, and support associated remediation activities.
• Plan and execute solution upgrades, patches, migrations, configuration changes, and security enhancements in accordance with approved change and testing processes.
• Maintain technical and operational documentation, including architecture, configurations, procedures, runbooks, control mappings, logs, reports, and implementation records.
• Coordinate with Cybersecurity Governance, SOC, IAM, Infrastructure, Network, Cloud, Endpoint, and business teams to translate security and regulatory requirements into effective technical implementations.
• Coordinate with vendors and service providers for technical support, escalations, product issues, upgrades, security advisories, and continuous improvement.
• Monitor solution effectiveness and operational performance and recommend improvements to strengthen data protection, security posture, compliance, and service reliability.

Job description

Responsible for administering, maintaining, and enhancing enterprise Mobile Device Management (MDM), Data Loss Prevention (DLP), and Digital Rights Management (DRM) solutions to protect organizational information and ensure compliance with applicable cybersecurity, data protection, and regulatory requirements.

The role ensures that data protection and endpoint security controls are effectively implemented, monitored, and maintained throughout the information lifecycle. It translates cybersecurity, data protection, business, and regulatory requirements into technical controls that protect sensitive information from unauthorized access, disclosure, leakage, or misuse.

The role also supports compliance with applicable NCA requirements, relevant sector regulations, and organizational cybersecurity policies and standards.

Responsibilities

• Administer, maintain, monitor, and continuously improve enterprise MDM, DLP, and DRM solutions.
• Design, configure, implement, and tune data protection policies and technical controls based on information classification, data sensitivity, business requirements, risk, and regulatory obligations.
• Implement and maintain technical controls required to support compliance with applicable cybersecurity and regulatory requirements.
• Manage DLP controls across applicable channels to prevent unauthorized disclosure, transfer, or leakage of sensitive information.
• Administer DRM protections, including encryption, access permissions, usage restrictions, secure sharing, expiration, revocation, and persistent protection of sensitive information.
• Manage the MDM security lifecycle, including device enrollment, configuration, compliance policies, encryption, application controls, secure access, device restrictions, and decommissioning.
• Monitor and investigate data protection incidents, policy violations, abnormal activities, and non-compliant devices, and coordinate remediation and root-cause analysis.
• Review and optimize security policies, rules, exceptions, and enforcement actions to improve control effectiveness while minimizing false positives and unnecessary business impact.
• Integrate MDM, DLP, and DRM technologies with relevant enterprise platforms, including data classification, IAM, endpoint security, email, cloud services, and SIEM/SOC.
• Support cybersecurity assessments, regulatory reviews, and internal and external audits, including preparation and validation of required technical evidence.
• Perform periodic reviews to identify security gaps, control weaknesses, compliance gaps, and improvement opportunities, and support associated remediation activities.
• Plan and execute solution upgrades, patches, migrations, configuration changes, and security enhancements in accordance with approved change and testing processes.
• Maintain technical and operational documentation, including architecture, configurations, procedures, runbooks, control mappings, logs, reports, and implementation records.
• Coordinate with Cybersecurity Governance, SOC, IAM, Infrastructure, Network, Cloud, Endpoint, and business teams to translate security and regulatory requirements into effective technical implementations.
• Coordinate with vendors and service providers for technical support, escalations, product issues, upgrades, security advisories, and continuous improvement.
• Monitor solution effectiveness and operational performance and recommend improvements to strengthen data protection, security posture, compliance, and service reliability.