وظيفة أخصائي عمليات الأمن السيبراني لدى 2P Perfect Presentation في الرياض

Since 2004, 2P - Perfect Presentation has been a leader in Saudi Arabia’s ICT landscape, delivering integrated technology solutions that help organizations accelerate digital transformation and improve operational efficiency. With a strong foundation in innovation and service excellence, 2P continues to provide end-to-end solutions through its specialized business units and trusted market expertise.

We are seeking a dedicated and skilled Cyber security Operations Specialist to oversee, maintain, and optimize our core security infrastructure. In this role, you will be responsible for the day-to-day administration, policy configuration, health monitoring, and compliance reviews of critical security technologies-including email gateways, advanced threat sandboxing, web application firewalls (WAF), and multi-vendor firewall policy management tools.

Key Responsibilities & Duties

Email Security & Mail Gateway Administration (Fortinet Mail GW)

• Monitor service health, mail flow, system performance, and overall availability.
• Configure and maintain comprehensive email security policies, including anti-spam, anti-malware, and phishing protection.
• Investigate and resolve mail delivery issues, false positives/negatives, mail queue problems, and connectivity challenges.
• Plan and execute software upgrades, firmware updates, and hotfixes.
• Ensure all email security configurations comply with organizational security frameworks and regulatory mandates.

2. Web Application Security & WAF Administration (Fortinet WAF)

• Configure and maintain Fortinet WAF policies, virtual servers, protected applications, and security profiles.
• Configure SSL/TLS inspection and manage digital certificates.
• Perform onboarding of new web applications and APIs into the Fortinet WAF platform.
• Validate application functionality following WAF policy implementations.
• Monitor WAF logs, alerts, and security events to proactively identify malicious activities and web-based attacks.

3. Advanced Threat Analysis & Sandboxing (Fortinet Sandbox)

• Configure and maintain Forti Sandbox security policies, malware analysis profiles, Indicator of Compromise (IOC) generation, quarantine actions, and notification settings.
• Configure file submission policies and manage supported file types.
• Deploy, configure, and maintain robust integrations between Forti Sandbox and the Mail Gateway.
• Plan and execute firmware upgrades, hotfix installations, and signature updates.
• Ensure security configurations comply with organizational security policies and regulatory requirements.

4. Firewall Policy Review & Compliance Optimization (FireMon)

• Perform periodic reviews of firewall policies across complex, multi-vendor firewall environments using FireMon.
• Identify and assess critical security risks, including overly permissive rules, Any-to-Any access, shadowed rules, duplicate rules, redundant objects, and unused rules.
• Configure FireMon policy analysis, compliance frameworks, risk scoring, rule recertification, and reporting modules.
• Maintain integrations between FireMon and supported firewall vendors.
• Generate and analyze operational, compliance, and executive reports detailing firewall policy posture, violations, rule optimization, and risk exposure.

You will work closely with internal teams to ensure our security posture remains robust, resilient, and aligned with organizational policies and regulatory requirements.

Qualifications & Requirements

• Experience: Proven hands-on experience in administering Fortinet security solutions (Mail GW, Sandbox, WAF) and firewall policy management tools (FireMon).
• Technical Skills:Deep understanding of email security protocols, web application firewall configurations, SSL/TLS inspection, malware analysis, and firewall rule optimization.
• Compliance & Monitoring: Ability to translate regulatory standards and organizational security policies into technical configurations and security controls.
• Problem-Solving:Strong troubleshooting capability for diagnosing mail flow disruptions, application connectivity barriers, and policy-related vulnerabilities.