Security Officer Jobs in Saudi
24406 Jobs Found
Saudi German Health is hiring!<br>We are looking for an experienced Senior Network Security Engineer to join our team and support the security of our enterprise network, endpoints, remote access, and applications. The ideal candidate will bring strong hands-on experience across network and endpoint security, with particular expertise in Palo Alto, Cisco ISE/NAC, EDR, WAF, and ZTNA technologies.<br>Key Responsibilities Manage and maintain Palo Alto firewalls, security policies, and access controls. Manage Cisco ISE / Network Access Control (NAC), including authentication, profiling, posture assessment, and 802.1X policies. Implement and manage secure remote access through Prisma and Citrix ZTNA. Configure and manage Web Application Firewall (WAF) solutions and security policies. Administer Endpoint Detection & Response (EDR) platforms for threat detection, malware prevention, and containment. Monitor and investigate security alerts and coordinate remediation activities. Implement endpoint hardening and security policies across Windows, Linux, and mac OS environments. Collaborate with SOC, Threat Intelligence, Network, and Infrastructure teams on security incidents and improvements. Support compliance with security standards including NCA, ISO 27001, and CIS.<br>Requirements Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, or a related field.10 years of experience in IT Security. Strong hands-on experience with Palo Alto firewalls and Cisco ISE. Experience with EDR, WAF, NAC, ZTNA, and endpoint security/hardening. Strong understanding of enterprise network security and threat detection. Strong troubleshooting, communication, and cross-functional collaboration skills. Preferred certifications: CCNP Security, Microsoft Security certifications, or relevant GIAC certifications.
A leading organization is seeking an experienced Director of Security Technologies to lead the operation, development, and continuous improvement of network and application security technologies. The role will oversee cybersecurity controls, security infrastructure, operational security requests, vulnerability management, threat mitigation, and the performance of the Security Technologies function.<br>Key Responsibilities• Lead the operation and enhancement of network and application security technologies.• Oversee firewall policies, port access requests, device isolation, and website and email security controls.• Ensure security systems, signatures, configurations, and technologies are continuously updated and optimized.• Oversee web application security controls and resolve network and application access issues.• Evaluate, test, approve, and implement new security technologies and cybersecurity controls.• Lead vulnerability management activities and ensure identified security risks are effectively addressed.• Oversee root cause analysis for security incidents and ensure compliance with cybersecurity policies and controls.• Develop security policies, processes, procedures, tools, and operating models.• Establish departmental objectives, performance measures, and key performance indicators.• Manage departmental operations, workforce requirements, annual budget planning, and strategic priorities.• Lead, develop, and evaluate team members through objective setting, performance feedback, and professional development.<br>Qualifications and Experience• Bachelor’s degree in Cybersecurity, Information Technology, Network Engineering, or a related field.• Minimum of 7 years of relevant experience, including leadership or managerial experience.• Strong experience in network security, firewalls, web application security, vulnerability management, and security operations.• Proven ability to lead technical teams and manage complex cybersecurity environments.• Professional certifications such as CISSP, CISM, CEH, CCNP Security, or equivalent are preferred.
Tips: We are seeking a Security Specialist to strengthen our overall cybersecurity posture, safeguard our hybrid/cloud infrastructure, and protect our digital assets. While you will manage general security operations and incident response, a key focus will be administering and optimizing our core Microsoft ecosystem—including Entra ID, Intune, email security, and endpoint protection.<br>Responsibilities[Identity & Access Management: Implement Zero Trust principles, manage identity governance, and enforce access controls (MFA, Conditional Access, RBAC). Endpoint & Device Security: Secure endpoints across platforms using unified management tools (MDM/MAM), deployment baselines, and EDR solutions.<br>Email & Threat Protection: Maintain email security controls, prevent phishing/spoofing threats, and manage core authentication protocols (SPF, DKIM, DMARC).<br>Security Operations & Response: Monitor security alerts, perform threat analysis, respond to incidents, and improve our overall security posture and hardening baselines.<br>Security Awareness & Compliance: Assist in enforcing security policies, vulnerability management, and driving security best practices across the organization.<br><br>Qualifications Identity & Access Management: Implement Zero Trust principles, manage identity governance, and enforce access controls (MFA, Conditional Access, RBAC).<br>Endpoint & Device Security: Secure endpoints across platforms using unified management tools (MDM/MAM), deployment baselines, and EDR solutions.<br>Email & Threat Protection: Maintain email security controls, prevent phishing/spoofing threats, and manage core authentication protocols (SPF, DKIM, DMARC).<br>Security Operations & Response: Monitor security alerts, perform threat analysis, respond to incidents, and improve our overall security posture and hardening baselines.<br>Security Awareness & Compliance: Assist in enforcing security policies, vulnerability management, and driving security best practices across the organization.
At Air Products, we reimagine what’s possible. By tapping into the motivation of our people and our collective experience, we create the ideas and innovations that drive us forward. When we come together – where every voice is heard and everyone knows they belong and matter – we create solutions that launch people into space, support lifesaving care in hospitals, and enable the construction of groundbreaking, world scale production facilities.<br><br>Reimagine What’s Possible <br><br>NEOM Green Hydrogen Project is part of the most complex capital project and a flagship project at scale for Air Products. Air Products is executing a EPC Contract with the customer – NEOM Green Hydrogen Company (NGHC). Air Products have the responsibility to design, build and delivery Process Controls / Process Automation System and IT/Digital Technology infrastructure scope. This scope shall comply with the local laws and regulations on cybersecurity, which is a crucial part in the project’s safety, security and overall compliance.<br><br>The incumbent in this position based at project site, as ICS Cyber Security Engineer, plays a key member of a Cybersecurity task force team to undertake the field verification of the cyber assets to comply with the project specifications and the site acceptance criteria.<br><br>The Engineer is also responsible for coordinating with Engineering, Pre-Commissioning, Commissioning and Client operations team related to Cyber Security field verifications.<br><br>The Cyber Security engineer acts as the technical interface between Air Products project execution, commissioning teams and the vendors, during the field verification of cyber assets.<br><br>Experience in supporting large scale construction, pre commissioning, commissioning, startup and handover phases, ensuring cybersecurity controls are implemented without impacting schedule critical activities<br><br>The position is based out of Duba, Tabuk Region, Saudi Arabia working on rotation of 8 Weeks ON / 2 Weeks OFF.<br><br>The position will be a site-based role with the below duties:<br><br>Perform the field verification of the design, implementation and testing of the cyber assets to meet the cybersecurity standards, regulatory requirements and technologies, processes/procedures and specifications to transition the project assets to commissioning, start-up and final handover to the client. Develop, document, and maintain cybersecurity asset register and other key deliverables as guided by the Site Cybersecurity Lead or Cybersecurity Manager. Organize and lead/facilitate the resolution and implementation of the cybersecurity risk assessment exercises and implement risk assessment recommendations for Air Products design and also for vendor/ skid package control system Support pre‑commissioning and commissioning teams by validating firewall rules, secure remote access, endpoint hardening, Asset inventory validation, Access control execution, and logging before system energization. Lead and oversee architecture, standards and FAT/SAT/CSAT procedures development, execution and performance testing. Ensure the verification and approval of the 3rd party device access needs as requested by the subcontractor and vendors as part of the commissioning and start-up requirements on the vendor packages. Participate in technical coordination meetings with cross-functional teams as guided by the Site Cybersecurity lead. Coordinate with vendors and Air Products engineering team to resolve and liquidate the punch points identified during the field verification of the cyber assets. Coordinate and assist the Site Cybersecurity Lead with the change management activities to ensure design, procurement, installation, commissioning, and startup of cybersecurity scope are reviewed for schedule, and budget compliance. Prepare weekly updates and dashboard to the Site cybersecurity lead and the Project Cybersecurity Collaboration Lead. Identify and escalate risks and opportunities, Collect and report lessons learned during vendor site visits and project execution. Support OT cybersecurity handovers to operations, including procedures, asset inventories, access management, and incident response alignment. Contribute to OT Cybersecurity Operations Model, including monitoring, patching, backup, disaster recovery, and secure remote support.<br><br>Minimum Requirements<br><br>Bachelor’s degree in engineering (electronics & communication, (or) instrumentation / process automation background is preferred) or equivalent. Minimum 10 to 15 years’ experience in Operational Technology (OT), or related field with at least 3 years focused on designing (or) building (or) validating the design/implementation of the cybersecurity for industrial control systems and networks. Project implementation experience of Saudi cyber standards HCIS, NCA, CRA compliance, ISA 62443 Industry standards, specifications, regulations, best practices. Strong knowledge and understanding of controls systems (SCADA/DCS/PLCs, etc.,), relevant protocols (Modbus, PROFINET, DNP3, IEC61850, etc.), key technologies including Firewalls, IDS, Anti-Virus, Vulnerabilities assessments, etc. in the ICS/OT networks OT/ICS cybersecurity relevant accreditations such as ISA/IEC62443, SANS or other internationally recognized certifications are preferred. Additional cybersecurity certifications such as CISSP, CISM, ISO 27001, etc., will be an added advantage Advanced skills in Microsoft Office tools such as Teams, Share Point, Word, Excel, Power point and Visio etc.,Excellent communication skills and the ability to communicate appropriately at all levels of the organization; this includes written and verbal communications<br><br>Founded in 1940, Air Products is a world-leading industrial gases company and has a proud history of innovation, operational excellence, with an unwavering commitment to safety and environmental stewardship. Working together, we are taking our passion and diverse backgrounds forward to reimagine what’s possible and generate a cleaner future for our customers, our communities, and the world.
<h2 class="h5">Job description</h2>
<div class="t-break" data-jb-field="description">
<span>Qiddiya Investment Company is looking for a highly experienced and innovative Senior Manager - Cybersecurity Security Architecture to join our forward-thinking team.<br> In this pivotal role, you will oversee the development and implementation of a comprehensive cybersecurity architecture framework designed to protect our digital and operational environments.<br> Your strategic leadership will be essential in integrating security into all levels of our organization, ensuring that security measures support our ambitious growth and innovation goals.<br> As a senior leader, you will play an instrumental role in shaping the security posture of Qiddiya by designing robust security architectures that align with industry best practices and regulatory standards.<br> Responsibilities Lead the design, development, and enhancement of the cybersecurity security architecture across all platforms and technologies.<br> Establish security design principles and standards that guide the implementation of secure systems and applications.<br> Conduct thorough assessments of existing security architectures and identify areas for improvement to mitigate risks.<br> Collaborate with cross-functional teams, including IT, engineering, and operations, to ensure that security architecture is implemented throughout the SDLC and operational phases.<br> Monitor advancements in cybersecurity technologies and integrate relevant solutions to enhance the security architecture.<br> Provide mentoring and leadership to team members and promote a culture of security awareness within the organization.<br> Develop and deliver presentations on cybersecurity architecture strategies to stakeholders and executive leadership.<br> Engage with external partners and vendors to assess potential security solutions and ensure alignment with architecture goals.<br> Comprehensive benefits package Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or a related field; a master’s degree is preferred.<br> 10+ years of experience in cybersecurity, with a focus on security architecture and design.<br> Demonstrated expertise in developing enterprise-level cybersecurity architectures for complex IT environments.<br> In-depth knowledge of security frameworks, standards (e.<br>g., NIST, ISO 27001, CIS Controls), and best practices.<br> Strong analytical and problem-solving abilities, with a strategic and innovative mindset.<br> Excellent leadership, communication, and collaboration skills, able to work effectively with diverse teams and stakeholders.<br> Relevant certifications such as Certified Information Systems Security Professional (CISSP) or Certified Information Security Architect (CISA) are highly desirable.<br></span> </div><h2 data-automation-id="subHeaderPreferredCandidate" class="h5">
Preferred candidate </h2>
<div class="row is-m v-align-top t-small bg-mute">
<div class="col is-3 p5" data-automation-id="label_Years_of_experience">
<b>Years of experience</b>
</div>
<div class="col is-9 p5" data-automation-id="data_Years_of_experience">
No experience required </div>
</div>
<div class="row is-m v-align-top t-small ">
<div class="col is-3 p5" data-automation-id="label_Degree">
<b>Degree</b>
</div>
<div class="col is-9 p5" data-automation-id="data_Degree">
Bachelor's degree / higher diploma </div>
</div>
<p > </p>
<table class="MsoNormalTable" border="1" cellspacing="0" cellpadding="0">
<tbody>
<tr >
<td colspan="6" valign="top">
<p ><a name="_Hlk189495630"></a><strong><span >Job Description </span></strong></p>
</td>
</tr>
<tr >
<td colspan="6" valign="top">
<p ><strong><span >OVERVIEW</span></strong></p>
</td>
</tr>
<tr >
<td >
<p ><strong><span >Job Title</span></strong></p>
</td>
<td >
<p ><span >Consultant</span></p>
</td>
<td >
<p ><strong><span >Job Code</span></strong></p>
</td>
<td >
<p ><span ><span >696223</span></span></p>
</td>
<td >
<p ><strong><span >Grade</span></strong></p>
</td>
<td >
<p ><span >I3</span></p>
</td>
</tr>
<tr >
<td >
<p ><strong><span >Group</span></strong></p>
</td>
<td >
<p ><span >-</span></p>
</td>
<td >
<p ><strong><span >Division</span></strong></p>
</td>
<td colspan="3">
<p ><span >Legal, Risk & Governance</span></p>
</td>
</tr>
<tr >
<td >
<p ><strong><span >Department</span></strong></p>
</td>
<td >
<p ><span >Cybersecurity</span></p>
</td>
<td >
<p ><strong><span >Unit</span></strong></p>
</td>
<td colspan="3">
<p ><span >-</span></p>
</td>
</tr>
</tbody>
</table>
<p > </p>
<table class="MsoNormalTable" border="1" cellspacing="0" cellpadding="0">
<tbody>
<tr>
<td valign="top">
<p ><strong><span >ROLE PURPOSE</span></strong></p>
<p ><em><span >The aim is to state the overall significance of the job from the organization's perspective.</span></em></p>
</td>
</tr>
<tr >
<td >
<p ><span >The role exists to lead and support cybersecurity activities by assessing security risks, strengthening controls, supporting compliance with cybersecurity requirements, coordinating with internal stakeholders, and contributing to the protection of Elm’s information assets, systems, and digital services. The role contributes to Elm’s strategic and operational objectives by enabling secure business operations, improving cybersecurity maturity, and ensuring cybersecurity practices are implemented in alignment with approved policies, procedures, regulatory requirements, and information security standards.</span></p>
</td>
</tr>
</tbody>
</table>
<p > </p>
<table class="MsoNormalTable" border="1" cellspacing="0" cellpadding="0">
<tbody>
<tr >
<td colspan="2" valign="top">
<p ><strong><span >KEY ACCOUNTABILITIES & ACTIVITIES</span></strong></p>
<p ><em><span >This section describes the principal outputs required from the job.</span></em></p>
</td>
</tr>
<tr >
<td >
<p ><strong><span >Key Accountabilities</span></strong></p>
</td>
<td >
<p ><strong><span >Key Activities</span></strong></p>
</td>
</tr>
<tr >
<td >
<p ><span >1. Cybersecurity Governance Support</span></p>
</td>
<td >
<p ><span >• Lead assigned cybersecurity governance activities to ensure alignment with approved policies, standards, and regulatory requirements.</span></p>
<p ><span >• Support the review and implementation of cybersecurity frameworks, procedures, and control requirements.</span></p>
<p ><span >• Coordinate with relevant stakeholders to ensure cybersecurity requirements are understood and applied across assigned areas.</span></p>
</td>
</tr>
<tr >
<td >
<p ><span >2. Cybersecurity Risk Assessment</span></p>
</td>
<td >
<p ><span >• Conduct cybersecurity risk assessments for systems, services, processes, and business initiatives.</span></p>
<p ><span >• Identify security risks, control gaps, threats, and vulnerabilities that may impact confidentiality, integrity, or availability.</span></p>
<p ><span >• Recommend practical mitigation actions and follow up on risk treatment plans with relevant stakeholders.</span></p>
</td>
</tr>
<tr >
<td >
<p ><span >3. Security Controls Assessment</span></p>
</td>
<td >
<p ><span >• Assess the effectiveness of cybersecurity controls and identify areas requiring improvement.</span></p>
<p ><span >• Review control implementation evidence and validate alignment with internal cybersecurity requirements.</span></p>
<p ><span >• Support continuous improvement of control design, implementation, and monitoring practices.</span></p>
</td>
</tr>
<tr >
<td >
<p ><span >4. Compliance and Regulatory Alignment</span></p>
</td>
<td >
<p ><span >• Support compliance activities related to cybersecurity regulations, internal policies, and applicable standards.</span></p>
<p ><span >• Coordinate evidence collection, gap analysis, and remediation follow-up for cybersecurity compliance requirements.</span></p>
<p ><span >• Prepare compliance updates, findings, and recommendations for management review.</span></p>
</td>
</tr>
<tr >
<td >
<p ><span >5. Cybersecurity Advisory and Stakeholder Support</span></p>
</td>
<td >
<p ><span >• Provide cybersecurity guidance to business and technical teams within the assigned scope.</span></p>
<p ><span >• Support projects and initiatives by reviewing cybersecurity requirements and advising on secure implementation practices.</span></p>
<p ><span >• Coordinate with stakeholders to address cybersecurity concerns, clarify requirements, and support informed decision-making.</span></p>
</td>
</tr>
<tr >
<td >
<p ><span >6. Security Monitoring and Incident Support</span></p>
</td>
<td >
<p ><span >• Support cybersecurity monitoring activities by reviewing security alerts, trends, and reported incidents within the assigned scope.</span></p>
<p ><span >• Coordinate with relevant technical teams to investigate security events and support incident response activities.</span></p>
<p ><span >• Document findings, actions, and recommendations to strengthen detection, response, and prevention capabilities.</span></p>
</td>
</tr>
<tr >
<td >
<p ><span >7. Vulnerability and Threat Management Support</span></p>
</td>
<td >
<p ><span >• Support vulnerability assessment activities by reviewing findings, prioritizing risks, and following up on remediation actions.</span></p>
<p ><span >• Coordinate with system owners and technical teams to ensure vulnerabilities are addressed based on risk and business impact.</span></p>
<p ><span >• Monitor emerging cybersecurity threats and contribute to awareness of risks relevant to Elm’s environment.</span></p>
</td>
</tr>
<tr >
<td >
<p ><span >8. Cybersecurity Reporting and Continuous Improvement</span></p>
</td>
<td >
<p ><span >• Prepare cybersecurity reports, dashboards, and status updates covering risks, controls, compliance, incidents, and improvement actions.</span></p>
<p ><span >• Analyze cybersecurity performance indicators to identify trends, gaps, and opportunities for improvement.</span></p>
<p ><span >• Contribute to initiatives that enhance cybersecurity maturity, operational resilience, and protection of information assets.</span></p>
</td>
</tr>
<tr >
<td >
<p ><span >9. Policies, Processes & Procedures</span></p>
</td>
<td >
<p ><span >• Follow all relevant departmental policies, processes, standard operating procedures, and instructions so that work is carried out in a controlled and consistent manner.</span></p>
<p ><span >• Comply with all relevant safety, quality, and environmental management policies, procedures, and controls to ensure a healthy and safe work environment.</span></p>
</td>
</tr>
<tr >
<td >
<p ><span >10. Information Security</span></p>
</td>
<td >
<p ><span >• Comply with all relevant information security practices and standards to ensure data integrity and confidentiality.</span></p>
</td>
</tr>
</tbody>
</table>
<p > </p>
<table class="MsoNormalTable" border="1" cellspacing="0" cellpadding="0">
<tbody>
<tr>
<td colspan="2" valign="top">
<p ><strong><span >JOB SPECIFICATIONS</span></strong></p>
</td>
</tr>
<tr>
<td >
<p ><strong><span >Academic and professional qualifications</span></strong></p>
</td>
<td >
<p ><span >• Bachelor’s degree in Cybersecurity, Information Security, Computer Science, Information Technology, Computer Engineering, or a related field.</span></p>
<p ><span >• Professional certifications in cybersecurity, information security, risk management, governance, or related fields are preferred.</span></p>
</td>
</tr>
<tr>
<td >
<p ><strong><span >Years and Nature of Experience</span></strong></p>
</td>
<td >
<p ><span >• 4–6 years of relevant experience in cybersecurity, information security, cybersecurity governance, risk and compliance, security operations, vulnerability management, or a related field.</span></p>
<p ><span >• Experience in assessing cybersecurity risks, reviewing security controls, supporting compliance activities, coordinating with stakeholders, preparing cybersecurity reports, and contributing to security improvement initiatives.</span></p>
</td>
</tr>
</tbody>
</table>
<p > </p>
</span>
<p>We are seeking an experienced Cyber Security Advisor to lead and strengthen the organization s cybersecurity strategy, governance, and risk management practices. The role is responsible for providing strategic direction, ensuring compliance with cybersecurity standards and regulations, and enhancing the organization s overall security posture across technology, operations, and digital assets. The Cyber Security Advisor will work closely with executive management and cross-functional teams to develop security frameworks, oversee cyber risk assessments, support incident response planning, and ensure alignment with business objectives and regulatory requirements within Saudi Arabia.</p><p><b><br></b></p><p><b>Key Responsibilities:</b></p><ul><li>Lead and advise on cybersecurity governance, strategy, and operational security initiatives.</li><li>Develop and maintain cybersecurity policies, standards, and procedures.</li><li>Oversee cyber risk management and compliance activities.</li><li>Monitor and enhance security controls, frameworks, and best practices.</li><li>Support incident response, business continuity, and disaster recovery planning.</li><li>Collaborate with internal stakeholders to ensure secure implementation of systems and technologies.</li><li>Ensure compliance with local and international cybersecurity regulations and standards.</li><li>Provide strategic guidance to senior leadership on emerging cyber threats and security improvements.</li><li>Lead security awareness and cybersecurity culture initiatives across the organization.</li></ul><p><strong>Desired Candidate Profile</strong></p><h1>Qualifications & Experience:</h1><ul><li>Bachelor s degree in Cybersecurity, Information Security, Computer Science, or a related field.</li><li>12+ years of experience in cybersecurity, information security, governance, or related areas.</li><li>Strong knowledge of cybersecurity frameworks, risk management, and compliance standards.</li><li>Experience within large organizations, government, or semi-government environments is preferred.</li><li>Professional certifications such as CISSP, CISM, ISO 27001, or equivalent are highly preferred.</li><li>Strong leadership, communication, and stakeholder management skills.</li><li>Fluency in English is required.</li></ul>
About the Role<br>We are seeking an experienced Technical Lead – Network & Security to serve as the technical authority across enterprise network and security infrastructure. The role will provide technical leadership and architecture governance across network and security environments, oversee critical technical changes, and act as a senior escalation point for major network and security incidents.<br>Key Responsibilities Serve as the technical authority across enterprise Network and Security infrastructure. Lead and govern network and security architecture, standards, technical designs, and technology roadmaps. Review and approve network and security designs, configurations, and major technical changes. Provide technical leadership and guidance to network and security engineering teams. Act as a senior escalation point for major network and security incidents. Lead troubleshooting and root-cause analysis for complex network and security issues. Ensure network infrastructure is secure, scalable, highly available, and resilient. Provide technical oversight for security-related infrastructure changes and implementations. Support network segmentation, firewall architecture, secure connectivity, VPN, and enterprise network security initiatives. Ensure network and security changes follow appropriate risk, security, and change management processes. Collaborate with cybersecurity, infrastructure, cloud, applications, and other IT teams. Evaluate new network and security technologies and provide technical recommendations. Support business continuity, disaster recovery, and infrastructure resilience initiatives. Manage technical relationships with network and security vendors and technology partners. Maintain network and security architecture documentation, standards, and governance frameworks.<br>Qualifications Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, Engineering, or a related field.8+ years of experience in enterprise networking, network security, cybersecurity infrastructure, or a related field. Strong experience in enterprise network architecture and infrastructure. Strong knowledge of routing, switching, LAN, WAN, VPN, firewalls, network segmentation, and secure connectivity. Hands-on experience with enterprise firewall technologies. Experience with network and security architecture governance. Proven experience managing major incidents and technical escalations. Strong understanding of security controls and network security principles. Experience working within ITIL-based service management and change management environments.<br>Preferred Qualifications CCNP Enterprise or CCNP Security. Fortinet NSE / FCP or equivalent certification. Palo Alto PCNSA / PCNSE or equivalent certification. ITIL Foundation certification. Experience with both Fortinet and Palo Alto security platforms. Additional cybersecurity, network architecture, or security certifications. Experience in large-scale enterprise or mission-critical network environments. Experience with cloud networking and hybrid network architectures.
<h3 >About the Role</h3>
<p >iSolution is seeking a <strong >Cloud Security Engineer (L2)</strong> to join its Managed Services team. This part-time position is based in <strong >Jeddah, Makkah, Saudi Arabia</strong>. The successful candidate will be responsible for leading security operations within enterprise Google Cloud environments, focusing on securing customer workloads and enhancing their overall security posture.</p> <h3 >Role Overview</h3>
<p >The Cloud Security Engineer will play a critical role in managing and improving the security landscape for iSolution’s clients. This involves proactive security measures, incident response, and continuous optimization of cloud security controls. The role requires a professional with a strong understanding of Google Cloud security services and operations.</p> <h3 >Key Responsibilities</h3>
<ul >
<li >Monitor and investigate security events across various customer environments.</li>
<li >Operate and administer Google SecOps (Chronicle) effectively.</li>
<li >Manage Google Security Command Center (SCC) configurations and alerts.</li>
<li >Perform threat hunting activities and lead incident response efforts.</li>
<li >Conduct vulnerability assessments and comprehensive security reviews.</li>
<li >Implement cloud security best practices and hardening recommendations.</li>
<li >Review Identity and Access Management (IAM) policies and other security controls.</li>
<li >Configure Cloud Armor, Cloud Audit Logs, Secret Manager, Cloud KMS, and Organization Policies.</li>
<li >Produce detailed security reports and provide actionable recommendations.</li>
<li >Support compliance initiatives, including ISO 27001, CIS Benchmarks, and NIST frameworks.</li>
</ul> <h3 >Required Experience and Qualifications</h3>
<p >Candidates for this position should possess <strong >5 to 10 years of experience</strong> in cloud security engineering, with a specific focus on Google Cloud environments. A proven track record in security operations, incident response, and implementing cloud security best practices is essential. Familiarity with Google SecOps (Chronicle) and Google Security Command Center (SCC) is required, alongside experience with various Google Cloud security services.</p> <h3 >Work Arrangement and Location</h3>
<p >This is a <strong >part-time</strong> role, offering flexibility while contributing to critical security operations. The position is based in <strong >Jeddah, Makkah, Saudi Arabia</strong>.</p> <h3 >Join iSolution</h3>
<p >If you are a dedicated Cloud Security Engineer with expertise in Google Cloud and a commitment to enhancing enterprise security, we invite you to consider this opportunity with iSolution.</p>
Job Purpose The Network Security Manager is responsible for leading the design, implementation, operation, and continuous improvement of network security across enterprise, data center, and cloud environments. The role ensures that network infrastructure is securely designed, properly segmented, continuously monitored, and protected against cyber threats while maintaining high availability and performance of business-critical services. Key Responsibilities Lead the Network Security function and provide technical and operational leadership to the team. Define and maintain network security architecture, standards, configurations, and operational procedures. Manage enterprise and data center security technologies, including firewalls, WAF, VPN, IDS/IPS, secure gateways, and network access controls. Design and enforce network segmentation and security zones across data center, cloud, Kubernetes, and enterprise environments. Review firewall rules, security policies, NAT configurations, VPN connectivity, and network access requests. Ensure secure connectivity between on-premises infrastructure, cloud platforms, partners, and customer environments. Work closely with Network, Cloud, Infrastructure, Platform Engineering, SOC/Cybersecurity, and Architecture teams. Lead technical assessment and remediation of network security vulnerabilities and misconfigurations. Support incident response and perform technical investigation of network-related security incidents. Implement security monitoring, logging, alerting, and integration with SIEM/SOC platforms. Ensure network security controls comply with organizational policies and applicable cybersecurity requirements and standards. Conduct periodic reviews of firewall rules, privileged access, network segmentation, and security configurations. Evaluate new network security technologies and recommend improvements to the security architecture. Manage vendor relationships, support contracts, licensing, capacity, and technology lifecycle for network security solutions. Define and report operational KPIs covering security posture, availability, incidents, vulnerabilities, and remediation. Coach and develop network security engineers and ensure appropriate knowledge transfer and documentation. Qualifications & Experience Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, Network Engineering, or a related field.7+ years of relevant experience in network and infrastructure security.2+ years of experience in a technical leadership or management role. Strong hands-on knowledge of enterprise firewalls, WAF, VPN, IDS/IPS, routing, switching, and network segmentation. Strong hands-on experience with enterprise network and application security technologies, including NGFW, WAF, VPN, IDS/IPS, and Application Delivery Controllers (ADC), with experience in F5 BIG-IP (LTM/ASM/Advanced WAF) highly preferred. Experience securing data center, cloud, and container/Kubernetes environments. Experience with high-availability and business-critical production environments. Good understanding of Zero Trust and defense-in-depth security principles. Familiarity with Saudi cybersecurity requirements, particularly NCA cybersecurity controls, is highly desirable. Experience with automation, APIs, Infrastructure as Code, or network/security automation is an advantage. Preferred Certifications Relevant certifications such as CISSP, CCNP Security, Fortinet NSE/FCP/FCSS, Palo Alto PCNSE, Check Point, or equivalent are preferred. Key Competencies Strong technical leadership Security architecture and design Troubleshooting and root-cause analysis Incident management Risk-based decision making Stakeholder and vendor management Documentation and operational discipline Team leadership and development
Lead and manage Qiddiya's Third-Party Security Risk Management program to ensure vendors, partners, consultants, and service providers comply with cybersecurity requirements and do not introduce unacceptable risks to Qiddiya's information assets, systems, and operations. The role is responsible for establishing security assessment frameworks, overseeing vendor security reviews, and driving remediation of identified risks. This aligns with industry practices for cybersecurity risk management and third-party oversight.<br><br>Key Responsibilities<br><br> Develop and maintain the Third-Party Security Risk Management (TPSRM) framework. Conduct cybersecurity due diligence and risk assessments for vendors and suppliers. Review security requirements during procurement, RFP, and contract stages. Assess cloud providers, Saa S platforms, managed service providers, and strategic partners. Define vendor security controls aligned with NCA ECC, ISO 27001, NIST, and Qiddiya cybersecurity standards. Establish vendor risk classification and assessment methodologies. Monitor remediation plans and track closure of identified security gaps. Collaborate with Procurement, Legal, Compliance, Enterprise Risk, and Technology teams. Lead periodic reassessments of critical vendors. Report third-party cyber risks, trends, and KPIs to senior management. Manage external security audits, questionnaires, and assurance activities. Lead and develop the Third-Party Security team<br><br>Requirements<br><br>Bachelor's degree in Cybersecurity, Information Security, Computer Science, or related field8-12 years of cybersecurity experience. Minimum 4 years in Third-Party Security, Vendor Risk Management, Cybersecurity Risk Management, or GRC. Experience within large enterprises, giga projects, banking, telecom, government, or critical infrastructure environments. Experience managing teams and stakeholder engagement at senior levels
Job Role: Cyber Security Architect / Expert<br><br>Experience: 10+ years<br><br>Location: KSA (Onsite)<br><br>Duration: 1 year<br><br>Technology Stack<br><br>Azure Security Architecture & Engineering: Entra ID, APIM, Azure Policy, Key Vault, Defender for Cloud, Microsoft Sentinel, Microsoft Fabric/Purview, Azure Dev Ops security pipelines, API and microservices security, IoT security, and Gen AI security.<br><br>Security Assessment & Detection: Sentinel/KQL, Burp Suite, Nessus, SAST/DAST/SCA tools, OWASP web, API, and mobile security, and security scripting.<br><br>Job Description<br><br>Define security architecture, controls, identity, access, compliance and risk mitigation requirements. Ensure solution design follows secure-by-design principles across application, data, cloud and integration layers.<br><br>Configure Entra ID, MFA, Conditional Access, RBAC/PIM, Key Vault, WAF, Firewall, private endpoints, Defender and Sentinel. Execute or coordinate SAST, DAST, VA/PT, API and configuration assessments, track remediation and retest fixes.<br><br>Technical Skills Summary<br><br>Security configuration, Dev Sec Ops, vulnerability testing, SIEM/SOAR, evidence collection and operational security.<br><br>Functional Skills Summary<br><br>Security Architecture & Governance:<br><br>Define target architecture, security controls, risk mitigation measures, compliance alignment, access governance, and secure-by-design reviews, ensuring adherence to applicable NCA, PDPL, NDMO, and DGA requirements.<br><br>Platform Engineering & Operations<br><br>Build and operate environments, automate deployments, manage releases, and ensure monitoring, reliability, performance, and operational readiness.<br><br>Skills: soar,security architect,vulnerability,cyber security,architecture,security,siem,operational security,devsecops,security confirguration
For one of our clients, we are looking for an experienced Senior Cloud Security Engineer to lead the design, implementation, and management of a modern Google Cloud security architecture.<br>Key Responsibilities Architect, deploy, and manage Google Cloud Security Command Center Enterprise as the centralized platform for cloud security visibility and operations. Implement and manage Cloud Security Posture Management (CSPM) to identify misconfigurations, improve security posture, and support compliance requirements. Develop the organization’s Data Security Posture Management (DSPM) and Data Loss Prevention (DLP) strategy to discover, classify, monitor, and protect sensitive data across Google Cloud environments. Design and manage VPC Service Controls to establish secure perimeters around sensitive resources and reduce data exfiltration risks. Deploy and tune Container Threat Detection within Google Kubernetes Engine (GKE) to identify anomalous activity and protect containerized workloads. Manage Google Cloud Sec Ops, formerly Chronicle, as the primary platform for security telemetry ingestion, detection engineering, and threat hunting. Configure and manage Google Cloud Armor, including WAF rules and DDoS protection, for public-facing applications and services. Engineer and optimize SIEM capabilities to detect high-fidelity threats at scale. Build and maintain SOAR playbooks for automated alert triage, enrichment, investigation, and containment. Lead the investigation and resolution of complex security threat cases. Perform deep technical analysis of active threats and collaborate with the SOC and wider technology teams on remediation. Continuously improve cloud security controls, detection logic, response processes, and operational documentation.<br>Requirements At least 5 years of experience in cloud security, with strong hands-on expertise in Google Cloud environments. Proven experience deploying, configuring, and tuning:Google Cloud Security Command Center Google Cloud Sec Ops / Chronicle Google Cloud Armor VPC Service Controls Google Cloud DLP and related data protection tools Strong understanding of Google Cloud security architecture, IAM, networking, logging, monitoring, and security controls. Practical experience securing Kubernetes and Google Kubernetes Engine (GKE) environments. Knowledge of container runtime security, container threat detection, and workload protection. Experience with SIEM, SOAR, threat detection, threat hunting, and incident response. Ability to design and automate security operations workflows and response playbooks. Strong analytical and problem-solving skills, with the ability to investigate complex security incidents. Excellent communication skills and the ability to work effectively with security, infrastructure, Dev Ops, and SOC teams. Professional working proficiency in English.<br>Preferred Qualifications Google Cloud Professional Cloud Security Engineer certification. Experience with security and compliance frameworks such as ISO 27001, NIST, CIS, or PCI DSS. Experience with infrastructure-as-code and security automation. Familiarity with Dev Sec Ops practices and cloud-native application security. Experience operating security platforms in large-scale or highly regulated environments.
<p>DeepSource Technologies is seeking a talented Cloud Security Engineer focused on securing our cloud environments. This position is exclusively available for Saudi nationals, and the successful candidate will play a crucial role in implementing and maintaining robust security measures within our cloud infrastructure while ensuring compliance with local and international regulations.</p><p><strong>Key Responsibilities:</strong></p><ul><li><strong>Security Architecture Design:</strong> Design and implement security architectures and frameworks for cloud solutions, particularly in AWS and Azure environments.</li><li><strong>Identity and Access Management:</strong> Configure and manage IAM roles, policies, and permissions to enforce strong access controls and governance.</li><li><strong>Threat Detection and Incident Response:</strong> Monitor cloud environments for security events, and respond to incidents, perform vulnerability assessments, and remediate issues promptly.</li><li><strong>Compliance and Risk Management:</strong> Ensure compliance with cybersecurity policies, regulations, and standards relevant to cloud security (e.g., ISO 27001, NIST).</li><li><strong>Automation and Tooling:</strong> Develop automation scripts to enhance security operations and implement infrastructure as code (IaC) principles using tools like Terraform and CloudFormation.</li><li><strong>Collaboration:</strong> Work closely with development, operations, and compliance teams to integrate security practices into the software development lifecycle (SDLC).</li></ul><p><strong>Experience:</strong></p><ul><li>5+ years of experience in cloud security roles, with a strong focus on AWS and Azure cloud platforms.</li></ul><p><strong>Certifications:</strong></p><ul><li>Certified Cloud Security Professional (CCSP), AWS Certified Security Specialty, or equivalent certifications are preferred.</li></ul><p><strong>Technical Skills:</strong></p><ul><li>Proficient in security best practices for cloud architectures and services, with knowledge of security tools (e.g., SIEM, IDS/IPS, firewalls).</li><li>Experience with vulnerability scanning and remediation techniques for cloud infrastructure.</li><li>Familiarity with container security and orchestration technologies (e.g., Docker, Kubernetes).</li></ul><p><strong>Key Competencies:</strong></p><ul><li>Strong analytical and problem-solving skills, with the ability to prioritize and manage multiple tasks efficiently.</li><li>Excellent communication and teamwork skills.</li></ul><p>Private Health Insurance ( Family )<br>Annual flight tickets ( Family )</p><p><strong>Desired Candidate Profile</strong></p><p>5+ years of experience in cloud security roles, with a strong focus on AWS and Azure cloud platforms.</p><p>Certified Cloud Security Professional (CCSP), AWS Certified Security Specialty, or equivalent certifications are preferred.</p><p>Proficient in security best practices for cloud architectures and services, with knowledge of security tools (e.g., SIEM, IDS/IPS, firewalls).</p><p>Experience with vulnerability scanning and remediation techniques for cloud infrastructure.</p><p>Familiarity with container security and orchestration technologies (e.g., Docker, Kubernetes).</p><p>Strong analytical and problem-solving skills, with the ability to prioritize and manage multiple tasks efficiently.</p><p>Excellent communication and teamwork skills.</p>
Position: Senior Network Security Engineer Location: Riyadh, Saudi Arabia Experience: 5-8 Years Notice Period: Immediate to 30 Days Candidates currently residing in Saudi Arabia are preferred<br>Must have Skills:ADC, WAF & GTMFirewalls (Palo Alto preferred) Proxy / Secure Web Gateway Email Gateway IPSNACSandbox F5 Technologies Forcepoint Security Suite<br>Key Responsibilities:<br>Design, implement, and manage network security solutions across enterprise environments. Configure, maintain, and troubleshoot Palo Alto Firewalls and F5 solutions. Manage web security, email security, and DLP solutions using Forcepoint. Monitor, analyze, and respond to security incidents and threats. Perform vulnerability assessments, risk assessments, and security audits. Ensure compliance with security standards, governance frameworks, and best practices. Collaborate with infrastructure and operations teams for secure network architecture. Prepare technical documentation, reports, and security recommendations. Preferred Certifications: CISSP | CISM |PCNSE |CCNP Security
Position: L3 Security Monitoring Manager Location: Riyadh / Jeddah, Saudi Arabia Contract Duration: 1 Dec 2026 - 28th Feb 2027 ( 3 months contract)<br>About the Role We are seeking an experienced L3 Security Monitoring Manager to lead the SOC's Tier 3 security monitoring and incident response function for a major football event project in Saudi Arabia. The role will be responsible for advanced security investigations, incident response coordination, SOC operational quality, and ensuring effective detection and response across a 24/7 security monitoring environment. The successful candidate will lead L2 analyst teams, manage escalated security incidents, improve SOC detection and response capabilities, and coordinate security response activities during live event operations.<br>Key Responsibilities Lead the SOC's Tier 3 / L3 security monitoring function, ensuring effective detection, investigation, and response to cybersecurity incidents. Manage L2 security analyst teams across 24/7 shift rotations, including staffing, scheduling, workload management, and quality assurance. Perform advanced Tier 3 investigations into escalated security incidents. Own incident classification, severity determination, escalation, and response coordination. Lead incident response activities through containment and eradication for confirmed cybersecurity incidents. Escalate major and critical incidents to the appropriate senior stakeholders. Own and continuously improve SOC playbooks, procedures, SIEM use cases, and SOAR workflows. Review and refine SIEM/SOAR detection content to improve detection accuracy and reduce false positives. Conduct root-cause analysis and post-incident / after-action reviews, ensuring lessons learned are incorporated into detection and response improvements. Own the quality of shift handovers, ensuring continuity of monitoring and that no critical security events or investigations are missed. Track, analyze, and report SOC operational metrics, including:Alert volumes False-positive rates Mean Time to Detect (MTTD) Mean Time to Respond (MTTR) Escalation accuracy Incident volumes and severity Mentor and develop L2 analysts and support the team's training, skills development, and certification pathway. Act as Incident Commander for security events during live event operations. Coordinate security incidents with IT, cybersecurity, venue/facilities security, and relevant external stakeholders, including law enforcement liaisons where required. Ensure SOC operations and incident response processes remain effective throughout live event periods. Identify operational gaps and implement improvements to SOC processes, procedures, tooling, and analyst capabilities.<br>Requirements3+ years of relevant cybersecurity/SOC experience, with strong experience in Tier 2/Tier 3 security operations. Proven experience leading or supervising SOC/security monitoring teams. Strong hands-on experience in advanced security incident investigation and incident response. Experience managing 24/7 SOC operations and shift-based teams. Strong knowledge of SIEM and SOAR technologies, security monitoring, alert triage, and detection engineering. Experience developing and maintaining SOC playbooks and incident response procedures. Strong understanding of incident classification, severity assessment, escalation, containment, and eradication. Experience with root-cause analysis and post-incident reviews. Ability to analyze SOC operational metrics and drive continuous improvement. Strong leadership, mentoring, communication, and stakeholder management skills. Experience coordinating cybersecurity incidents across multiple technical and operational teams. Experience working in a high-volume, high-availability, or mission-critical environment would be an advantage. Experience supporting cybersecurity operations during major events would be an advantage.<br>Preferred Certifications Relevant cybersecurity and SOC certifications would be an advantage, including:CISSPGIAC / GCIH / GCIA / GCFASecurity+CEHCertified SOC Analyst (CSA) Other recognized incident response, SOC, or cybersecurity certifications<br>The role combines hands-on Tier 3 technical investigation with SOC operational leadership, making it particularly suited to candidates who have progressed from L2/Senior SOC Analyst responsibilities into SOC leadership or management
We are looking for an experienced Network Security Engineer to join our team and support the design, implementation, and management of enterprise network security solutions.<br>Key Requirements:5–8 years of experience in Network Security. Strong hands-on experience with Palo Alto Firewalls (mandatory). Experience with Panorama, Global Protect VPN, Security Policies, NAT, App-ID, User-ID, Threat Prevention, URL Filtering, and Wild Fire. Strong knowledge of Network Security Architecture, Routing & Switching, TCP/IP, BGP, OSPF, VLANs, and VPN technologies (IPSec/SSL VPN). Experience with High Availability (HA) deployments and migration activities. Strong troubleshooting and security log analysis skills. Experience in firewall policy review, optimization, and best practices. Experience working in Data Center and Enterprise environments.<br>Preferred Certifications:PCNSE – Highly Preferred PCNSACCNP Security or equivalent is a plus.<br>Key Responsibilities:Design, implement, and manage enterprise security solutions. Maintain and optimize Palo Alto firewall infrastructure. Conduct security assessments and firewall policy reviews. Troubleshoot and resolve network and security incidents. Support DR, HA, and Business Continuity requirements. Ensure compliance with security standards and best practices. Lead security improvement initiatives and infrastructure upgrades.
<h3 >About the Role</h3>
<p >DP World is seeking an <strong >Assistant Manager Information Security & Network</strong> to join their team in Jeddah, Makkah, Saudi Arabia. This full-time position is integral to maintaining a robust and secure digital infrastructure within the organization's operations in the region.</p> <h3 >Role Purpose</h3>
<p >The primary purpose of this role is to manage the comprehensive information security and networking functions. This involves ensuring the <strong >confidentiality, integrity, and availability</strong> of all systems, thereby safeguarding critical data and operational continuity across DP World's facilities.</p> <h3 >Key Responsibilities</h3>
<p >The Assistant Manager Information Security & Network will undertake a range of critical responsibilities, including:</p>
<ul >
<li >Developing and enforcing comprehensive network and security policies to protect organizational assets.</li>
<li >Monitoring and managing security infrastructure, including firewalls, Intrusion Detection/Prevention Systems (IDS/IPS), and Security Information and Event Management (SIEM) systems.</li>
<li >Ensuring strict compliance with relevant security standards such as ISO 27001, National Cyber Security Authority (NCA) regulations, and internal DP World policies.</li>
<li >Coordinating and leading the response to security incidents, including investigation, containment, and recovery efforts.</li>
<li >Managing vendor contracts and Service Level Agreements (SLAs) related to network and security services.</li>
</ul> <h3 >Qualifications and Experience</h3>
<p >Candidates for this position should possess a strong background in information security and network management. A minimum of <strong >5 to 10 years of relevant experience</strong> is required, demonstrating a proven track record in managing complex security and network environments and ensuring compliance with industry standards.</p> <h3 >Work Location and Type</h3>
<p >This is a <strong >full-time</strong> position based in <strong >Jeddah, Makkah, Saudi Arabia</strong>. The role requires on-site presence to effectively manage critical security and network operations within the local facilities.</p> <h3 >Application Information</h3>
<p >Interested candidates who meet the specified requirements are encouraged to apply. Further details regarding the application process will be provided.</p>
<h3 >About the Role: Cloud Security Engineer GCP</h3>
<p >Halian | Managed Services, Recruitment Agency & Contract Staffing is seeking a <strong >Cloud Security Engineer GCP</strong> for a contract position in Dhahran, Eastern region. This role requires a strong background in traditional security, with subsequent specialization in Google Cloud Platform (GCP). The ideal candidate will have 5-10 years of experience, initially focusing on core security systems before transitioning to cloud security.</p>
<h3 >Key Responsibilities</h3>
<ul >
<li >Deploy and fine-tune Security Command Center, Google SecOps (Chronicle), and GCP data protection tools.</li>
<li >Secure Kubernetes/GKE workloads and container runtimes.</li>
<li >Manage IAM, network controls (VPC, Cloud Armor), and encryption (KMS) using Terraform.</li>
<li >Implement defense-in-depth strategies across network, workload, and data layers.</li>
<li >Support the migration of legacy security controls into GCP environments.</li>
</ul>
<h3 >Required Qualifications and Experience</h3>
<ul >
<li >A pure security background with no cloud experience in early career, demonstrating strong foundations in cloud concepts and core security principles (CIA triad, zero trust, least privilege, defense in depth).</li>
<li >Proven experience securing legacy, non-cloud-native systems, including firewalls, IDS/IPS, legacy operating systems, and security appliances.</li>
<li >Hands-on experience with Security Command Center, Google SecOps, and GCP data protection tools.</li>
<li >Strong knowledge of Kubernetes/GKE security.</li>
<li >Proficiency in Terraform for managing security controls such as firewall rules, IAM, and encryption keys.</li>
<li >Hands-on experience with KMS/encryption key configuration, including a clear understanding of CMEK versus CSEK.</li>
</ul>
<h3 >Preferred Certifications</h3>
<ul >
<li >Professional Cloud Security Engineer certification or any other GCP Professional certification is a plus.</li>
</ul>
<h3 >Work Type and Location</h3>
<p >This is a <strong >contract position</strong> located in Dhahran, Eastern region. The role requires on-site presence to support critical security operations.</p>
<h3 >Application Process</h3>
<p >Candidates who meet the specified qualifications are encouraged to apply. Salary details will be discussed during the interview process.</p>
Cybersecurity Architect Large & High-Profile Football Tournament<br>???? Duration: 1-Oct-2026 to 1-Mar-2027???? Type: Full-time, onsite???? Location: Khobar/ Riyadh/Jeddah???? Immediate or short-notice availability preferred<br>About the Role We are looking for a Cybersecurity Architect to support the secure design of IT systems, networks, and technology environments for a large and high-profile football tournament in Saudi Arabia. The role will ensure cybersecurity requirements and controls are built into new and existing technology solutions.<br>Key Responsibilities Design and review secure IT systems, networks, and infrastructure. Ensure cybersecurity requirements are included in technology designs. Assess systems and architectures for security risks and weaknesses. Recommend appropriate security controls and solutions. Support secure network, infrastructure, and cloud architecture. Work with IT and technology teams to address security requirements. Review technical designs and provide cybersecurity recommendations. Support the implementation of secure architecture standards and best practices.<br>Requirements3+ years of relevant cybersecurity or security architecture experience. Experience in security architecture and secure system design. Strong understanding of network and infrastructure security. Experience assessing security risks within IT environments. Good knowledge of cybersecurity controls and best practices. Cloud security experience is an advantage.