Specialist I, Cybersecurity

AL-AYUNI Investment and Contracting Company; Riyadh; On-site; SAR 240,000 - 360,000; Full time

Job summary

AL-AYUNI Investment and Contracting Company in Riyadh seeks a Senior Specialist, Cybersecurity to lead design, implementation, and operation of advanced security solutions across on‑premises and cloud environments.

You will guide threat detection, vulnerability management, incident response, and security governance, mentor junior staff, and ensure compliance with NCA ECC, PDPL, and related standards.

Qualifications

• Bachelor-level degree in cybersecurity or related field is required.
• Minimum 5–8 years of relevant cybersecurity experience.
• Strong knowledge of enterprise security controls and risk management.

Responsibilities

• Lead design, implementation, configuration, and maintenance of cybersecurity solutions (firewalls, IDS/IPS, SIEM, EDR/XDR, DLP, IAM, PAM).
• Develop and enhance security architecture to protect networks, systems, apps and cloud environments.
• Manage security tools, policies, rules, and configurations for threat detection and prevention.
• Perform vulnerability management and penetration testing activities.
• Analyze security alerts, investigate incidents, and coordinate remediation.
• Lead incident response activities including containment and lessons learned.
• Maintain security hardening standards and secure configurations.
• Ensure compliance with NCA ECC, PDPL and applicable regulatory requirements.
• Mentor junior cybersecurity team members and lead security reviews for new tech.

Skills

Cybersecurity engineering

Threat detection

Incident response

Security architecture

Vulnerability management

Compliance & governance

Security auditing

Mentorship

Education

Bachelor's Degree in Cybersecurity, Information Security, Computer Science, Information Technology, or related field

Tools

Firewalls

IDS/IPS

SIEM

EDR/XDR

DLP

IAM

PAM

Security monitoring platforms

Job description

The Senior Specialist, Cybersecurity is responsible for leading the design, implementation, operation, and continuous improvement of advanced cybersecurity solutions to protect the organization's IT infrastructure, applications, cloud environments, and information assets. The role provides senior technical expertise in cybersecurity engineering, threat detection, vulnerability management, security architecture, and incident response while ensuring compliance with regulatory requirements and industry best practices, including NCA Cybersecurity Controls and PDPL.

Key Responsibilities

Cybersecurity Engineering & Operations

• Lead the design, implementation, configuration, and maintenance of cybersecurity solutions, including Firewalls, IDS/IPS, SIEM, EDR/XDR, DLP, IAM, PAM, and security monitoring platforms.
• Develop and enhance security architecture to protect enterprise networks, systems, applications, and cloud environments.
• Manage and optimize security tools, policies, rules, and configurations to improve threat detection and prevention capabilities.
• Perform advanced security assessments, vulnerability management, and penetration testing activities.
• Analyze security alerts, investigate incidents, perform root cause analysis, and coordinate remediation activities.
• Develop security hardening standards and ensure secure configuration of systems and infrastructure.
• Lead security reviews for new technologies, applications, vendors, and third-party integrations.
• Support implementation of security controls across on-premises and cloud environments.
• Monitor emerging cybersecurity threats, vulnerabilities, and attack techniques.
• Lead incident response activities, including investigation, containment, eradication, and lessons learned.
• Perform threat analysis and recommend improvements to the organization's security posture.
• Maintain and improve SIEM detection rules, correlation logic, and security use cases.
• Ensure cybersecurity controls align with NCA Essential Cybersecurity Controls (ECC), PDPL, and applicable regulatory requirements.
• Support internal and external cybersecurity audits by providing technical evidence and documentation.
• Conduct risk assessments and recommend security improvements.
• Maintain cybersecurity policies, procedures, standards, and technical documentation.
• Support compliance reporting and security maturity improvement initiatives.

Technical Leadership

• Provide technical guidance and mentorship to junior cybersecurity team members.
• Lead cybersecurity projects and ensure successful implementation of security solutions.
• Evaluate new cybersecurity technologies and recommend suitable solutions.
• Collaborate with IT infrastructure, application development, and business teams to ensure secure technology delivery.

Qualifications

Education:

• Bachelor's Degree in Cybersecurity, Information Security, Computer Science, Information Technology, or related field.

Experience

• 5–8 years of relevant experience in cybersecurity, information security, security engineering, or cyber operations.