Job Description

Roles & Responsibilities

At Almosafer Travel & Tourism Co, we re not just part of the travel industry, we re helping shape its future. As Saudi Arabia s leading travel company, we serve millions across every segment of the travel and tourism ecosystem. Rooted in our name Almosafer, meaning the traveler, we strive to make every journey seamless, personal, and purposeful. Our diverse platforms and services are built to deliver enriching experiences that reflect the spirit of Saudi Arabia and the wider region. We re united by a bold vision:To be the undisputed leader in travel services, fostering lasting connections and setting new benchmarks for excellence in the Kingdom and beyond.Our team across Saudi Arabia and the wider region blends deep cultural understanding with forward-thinking innovation, shaping a new standard for travel in the region.

This is not your typical IR or analyst role, we spend large percentages of our time on project work, balancing this with our operational duties such as detection engineering and incident response. If you're ready to make a tangible impact and drive innovative security projects, apply now to join our global team and help shape the future of security at Almosafer.We are looking for systems & software engineers who love to solve complex security problems fundamentally from first principles.

Responsibilities:

• Build, deploy and maintain large scale security systems across our ecosystem.
• Research, innovate and improve our security capabilities through new and enhanced tooling.
• Develop smart automation strategies to reduce the need for manual alert triage.
• Conduct detection engineering to increase coverage, identifying malicious activities across Almosafer s endpoints, infrastructure, networks, and cloud environments.
• Investigate alerts and potential incidents end-to-end, including digital forensics, malware analysis and threat intelligence as needed.
• Lead incident response efforts and respond to intrusion attempts and suspicious activities, collaborating with multiple Almosafer teams.
• Participate in red team exercises and threat simulations in order to identify gaps, improve competencies and expand the team s knowledge.

Desired Candidate Profile

Bachelor of Science in Computer Science, Engineering, Information Systems, or equivalent years of experience in a related technical field

5+ years of experience in the field of incident response, detection engineering or related security disciplines

Strong programming skills in Python, Rust, and/or Go.

Practical experience with BeyondCorp or Zero Trust security models.Proven expertise in one or more detection & response areas:

• Digital forensics (artefacts, disk/cloud acquisition, tools like GRR, Timesketch)
• Malware analysis (static & dynamic, IDA Pro, Ghidra)
• Incident management & response (large-scale, multi-stakeholder events
• Host/network intrusion detection (parsing large, unfamiliar logs/systems)
• Network telemetry (flows, PCAPs, Zeek)
• Threat intelligence (modelling actors and TTPs)
• Threat hunting (finding IOCs across data lakes)

OS internals across two or more of macOS, Windows, or Linux covering file/disk structures, forensics, security controls, hardening, scripting, and binary analysis.

Advanced cloud knowledge able to build, deploy, and investigate security events across two or more of AWS, Kubernetes, or GCP.