وظيفة مهندس أمن سيبراني شاغرة لدى Saudi Company For Hardware - SACO في الرياض

We are looking for a skilled and proactive Cybersecurity Engineer to strengthen our organization's security posture and protect our enterprise IT infrastructure, retail systems, POS environments, e-commerce platforms, and cloud environments.

The successful candidate will be responsible for implementing and managing enterprise security solutions, including Next-Generation Firewalls (NGFW), Endpoint Detection and Response (EDR/XDR), Network Access Control (NAC), Web Application Firewalls (WAF), and SIEM platforms.

This role will also support compliance with Saudi National Cybersecurity Authority (NCA) requirements, PCI-DSS, ISO/IEC 27001, and other relevant cybersecurity standards.

Key Responsibilities:

• Network Security: Design, implement, and manage firewalls, network segmentation, VPNs, and secure connectivity across corporate offices, retail stores, warehouses, and data centers.
• Endpoint Security: Manage endpoint protection, EDR/XDR, malware prevention, and security hardening across servers, POS systems, laptops, and other enterprise devices.
• Network Access Control & Identity Security: Implement NAC solutions and enforce access controls, MFA, identity management, and privileged access management (PAM).
• Web & E-Commerce Security: Manage WAF solutions and protect customer-facing applications, APIs, and e-commerce platforms against cyber threats, DDoS attacks, and malicious traffic.
• Cloud Security: Implement and maintain security controls across AWS, Azure, and hybrid environments, including IAM, encryption, network security, logging, and cloud security posture monitoring.
• Security Monitoring & Incident Response: Monitor security events through SIEM platforms, investigate incidents, coordinate response activities, and implement corrective actions.
• Vulnerability Management: Conduct vulnerability assessments, coordinate penetration testing, manage remediation activities, and ensure timely security patching.
• Governance & Compliance: Support compliance with NCA cybersecurity requirements, ISO/IEC 27001, NIST frameworks, PCI-DSS, and internal security policies.
• Risk Management & Documentation: Conduct cybersecurity risk assessments, maintain security documentation, prepare compliance evidence, and report on vulnerabilities and security incidents.
• Cross-Functional Collaboration: Work closely with infrastructure, cloud, network, application, and DevOps teams to integrate security into enterprise operations and technology projects.

Requirements & Qualifications:

• Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, or a related discipline.
• 3-5 years of relevant experience in cybersecurity or information security.
• Hands-on experience with enterprise security technologies, particularly firewalls, NAC, WAF, endpoint security, EDR/XDR, and SIEM.
• Strong understanding of network security, routing, switching, VPNs, wireless security, and network segmentation.
• Practical knowledge of cloud security across AWS, Azure, or hybrid environments.
• Familiarity with IAM, MFA, PAM, vulnerability management, and incident response processes.
• Good understanding of the Saudi NCA Cybersecurity Framework and relevant cybersecurity regulatory requirements in KSA.
• Working knowledge of ISO/IEC 27001, NIST Cybersecurity Framework, and PCI-DSS.
• Strong analytical, troubleshooting, communication, and problem-solving skills.

Preferred Qualifications:

• Professional certifications such as Security+, CEH, CISSP, CISM, CCSP, ISO/IEC 27001 Lead Implementer, Fortinet certifications, or AWS Certified Security - Specialty.
• Experience securing retail environments, POS systems, and high-transaction e-commerce platforms.
• Experience working with Security Operations Center (SOC) teams and incident response functions.