Cybersecurity Engineer

We are looking for a skilled and proactive Cybersecurity Engineer to strengthen our organization's security posture and protect our enterprise IT infrastructure, retail systems, POS environments, e-commerce platforms, and cloud environments.The successful candidate will be responsible for implementing and managing enterprise security solutions, including Next-Generation Firewalls (NGFW), Endpoint Detection and Response (EDR/XDR), Network Access Control (NAC), Web Application Firewalls (WAF), and SIEM platforms.This role will also support compliance with Saudi National Cybersecurity Authority (NCA) requirements, PCI-DSS, ISO/IEC 27001, and other relevant cybersecurity standards.

Key Responsibilities

Network Security: Design, implement, and manage firewalls, network segmentation, VPNs, and secure connectivity across corporate offices, retail stores, warehouses, and data centers.Endpoint Security: Manage endpoint protection, EDR/XDR, malware prevention, and security hardening across servers, POS systems, laptops, and other enterprise devices.Network Access Control & Identity Security: Implement NAC solutions and enforce access controls, MFA, identity management, and privileged access management (PAM).Web & E-Commerce Security: Manage WAF solutions and protect customer-facing applications, APIs, and e-commerce platforms against cyber threats, DDoS attacks, and malicious traffic.Cloud Security: Implement and maintain security controls across AWS, Azure, and hybrid environments, including IAM, encryption, network security, logging, and cloud security posture monitoring.Security Monitoring & Incident Response: Monitor security events through SIEM platforms, investigate incidents, coordinate response activities, and implement corrective actions.Vulnerability Management: Conduct vulnerability assessments, coordinate penetration testing, manage remediation activities, and ensure timely security patching.Governance & Compliance: Support compliance with NCA cybersecurity requirements, ISO/IEC 27001, NIST frameworks, PCI-DSS, and internal security policies.Risk Management & Documentation: Conduct cybersecurity risk assessments, maintain security documentation, prepare compliance evidence, and report on vulnerabilities and security incidents.Cross-Functional Collaboration: Work closely with infrastructure, cloud, network, application, and DevOps teams to integrate security into enterprise operations and technology projects.Requirements & Qualifications:Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, or a related discipline.3–5 years of relevant experience in cybersecurity or information security.Hands-on experience with enterprise security technologies, particularly firewalls, NAC, WAF, endpoint security, EDR/XDR, and SIEM.Strong understanding of network security, routing, switching, VPNs, wireless security, and network segmentation.Practical knowledge of cloud security across AWS, Azure, or hybrid environments.Familiarity with IAM, MFA, PAM, vulnerability management, and incident response processes.Good understanding of the Saudi NCA Cybersecurity Framework and relevant cybersecurity regulatory requirements in KSA.Working knowledge of ISO/IEC 27001, NIST Cybersecurity Framework, and PCI-DSS.Strong analytical, troubleshooting, communication, and problem-solving skills.

Preferred Qualifications

Professional certifications such as Security+, CEH, CISSP, CISM, CCSP, ISO/IEC 27001 Lead Implementer, Fortinet certifications, or AWS Certified Security – Specialty.Experience securing retail environments, POS systems, and high-transaction e-commerce platforms.Experience working with Security Operations Center (SOC) teams and incident response functions.