وظيفة مهندس أمن معلومات تقني لدى SYNORGE في الرياض

We are looking for an experienced and technically skilled Information Security Engineer to join one of our clients in Riyadh.

The ideal candidate should have strong hands-on experience in cybersecurity assessments, security architecture, Microsoft 365 security, infrastructure protection, vulnerability management, and security operations.

🔹 Key Responsibilities

✅ Security Assessments & Architecture

Conduct technical security assessments, configuration reviews, and gap analyses.

Review security architecture, new technologies, applications, and infrastructure changes.

Recommend security improvements aligned with industry standards and best practices.

✅ Microsoft 365 & Identity Security

Review Microsoft 365, Entra ID, and Microsoft Defender security configurations.

Assess Conditional Access, MFA, IAM, and PAM controls.

Monitor Microsoft Secure Score and recommend improvements.

✅ Infrastructure & Network Security

Review firewalls, WAF, VPN, network segmentation, and network security configurations.

Assess server, endpoint, cloud, and virtualization security.

Implement and validate security hardening aligned with CIS Benchmarks.

✅ Vulnerability Management & Security Operations

Coordinate vulnerability assessments, penetration testing, and remediation activities.

Review SOC operations, SIEM alerts, security incidents, and threat intelligence.

Support incident investigations and cybersecurity improvement initiatives.

✅ Email Security & Access Management

Assess email security controls, including SPF, DKIM, DMARC, and Microsoft Defender for Office 365.

Conduct privileged access reviews and identify excessive or unauthorized permissions.

✅ Security Governance & Reporting

Perform third-party vendor security assessments.

Support security audits, compliance assessments, and technical control reviews.

Prepare cybersecurity dashboards, risk reports, KPIs, and remediation trackers.

Coordinate cybersecurity projects and security awareness initiatives.

🔹 Preferred Skills & Qualifications

Strong technical background in information security and cybersecurity engineering.

Hands-on experience with Microsoft 365 security, Entra ID, Microsoft Defender, and identity security.

Good understanding of network security, cloud security, vulnerability management, SIEM, and SOC operations.

Familiarity with ISO 27001, NCA cybersecurity controls, CIS Benchmarks, and cybersecurity best practices.

Experience with security architecture reviews, risk assessments, and technical security reporting.

Strong analytical, troubleshooting, documentation, and communication skills.

Relevant certifications such as CISSP, CISM, Security+, CEH, or Microsoft Security certifications are an advantage.