Hays تعلن عن وظيفة أخصائي عمليات الأمن السيبراني في الرياض (عقد 12 شهراً)

We are seeking a Cybersecurity Operations Specialist to manage and operate enterprise security technologies and controls that protect endpoints, user devices, and organizational data. The successful candidate will be responsible for administering endpoint security solutions, enforcing security baselines, managing data protection controls, and ensuring compliance with regulatory requirements, including SAMA Cybersecurity Framework (CSF) and National Cybersecurity Authority (NCA) regulations.

This role requires hands-on experience with endpoint security, device management, data protection technologies, and collaboration with Security Operations Centers (SOC) and Managed Security Service Providers (MSSP).

Key Responsibilities

Endpoint Security & Device Management

• Manage and administer Mobile Device Management (MDM) solutions for laptops, desktops, and mobile devices.
• Administer and maintain Endpoint Detection and Response (EDR) platforms, ensuring full coverage, availability, and health monitoring.
• Monitor endpoint security posture and ensure compliance across all managed devices.
• Coordinate with SOC/MSSP teams regarding endpoint security alerts, investigations, and incident response activities.

Security Hardening & Compliance

• Implement and maintain endpoint and server hardening standards based on CIS Benchmarks or equivalent frameworks.
• Ensure compliance with security baselines and configuration standards.
• Track remediation of security vulnerabilities, non-compliant configurations, and endpoint risks.
• Support security assessments, audits, and compliance initiatives.

Data Protection

• Manage and maintain Data Loss Prevention (DLP) solutions, including:
• Policy creation
• Rule tuning
• Incident monitoring
• Exception management
• Operate and maintain data classification and watermarking solutions.
• Enforce information classification and data handling standards across the organization.

Security Tools Administration

• Administer, monitor, and optimize security technologies, including:
• Endpoint Detection and Response (EDR)
• Data Loss Prevention (DLP)
• Mobile Device Management (MDM)
• Email Security Gateway solutions
• Perform ongoing tuning and optimization to improve security effectiveness and reduce false positives.

Collaboration & Incident Support

• Work closely with IT Infrastructure teams to ensure secure configurations are implemented and maintained.
• Support cybersecurity incident investigations and response activities.
• Provide technical support and evidence during audits, assessments, and compliance reviews.

Documentation & Governance

• Maintain security tool documentation, standard operating procedures, and technical configurations.
• Prepare security reports and compliance evidence for internal and external stakeholders.
• Support SAMA and NCA audit requirements and regulatory inspections.

Required Qualifications

Education

• Bachelor's degree in Cybersecurity, Information Security, Computer Science, Information Technology, or a related discipline.

Experience

• 3-5+ years of experience in Cybersecurity Operations, Endpoint Security, Security Engineering, or a similar role.
• Experience working within regulated environments such as banking, financial services, fintech, or government sectors is highly preferred.

Technical Skills

Candidates should have hands-on experience with:

• Mobile Device Management (MDM) solutions (Microsoft Intune, Workspace ONE, Jamf, or similar)
• Endpoint Detection and Response (EDR) platforms (Microsoft Defender, CrowdStrike, SentinelOne, Trend Micro, etc.)
• Data Loss Prevention (DLP) solutions
• Endpoint and server hardening methodologies
• CIS Benchmarks and security configuration standards
• Vulnerability management and remediation processes
• Security incident investigation and response
• Email security and secure gateway technologies
• Microsoft Windows endpoint security administration

Regulatory & Compliance Knowledge

Experience or exposure to:

• SAMA Cybersecurity Framework (CSF)
• National Cybersecurity Authority (NCA) Controls
• Information Security Governance
• Security Compliance and Audit Support
• Risk Management and Security Best Practices