Cybersecurity Engineer | Riyadh, SA

Cybersecurity Engineer

Department: Cyber Security Monitoring

Employment Type: Full Time

Location: KSA

Description

We're looking for a Cybersecurity Engineer!

Key Responsibilities

You will be working in a dynamic, rapidly evolving environment with the following responsibilities:

Cloud Security

1. Strong understanding of cloud services such as Google Cloud Platform (GCP), Terraform, CI/CD Security, Kubernetes Security, GitLab, and product security features and fixes.

1. Perform Dynamic Application Security Testing (DAST) and Static Application Security Testing (SAST) for web, mobile, and API applications.
2. Plan and conduct infrastructure vulnerability assessments and penetration testing of systems, switches, servers, and other critical components.

1. Plan, implement, and manage enterprise-level Anti-Virus (AV) solutions to safeguard against malware, viruses, and other threats.

1. Review corporate IT infrastructure security, including network security controls, anti-malware implementation, Cloud Security Posture Management (CPM), Data Loss Prevention (DLP), firewall rule sets, backup and disaster recovery, and vulnerability management processes.

1. Work across various product and engineering teams to prioritize security features and bugs, ensuring implementation and mitigation.
2. Collaborate with DevOps and other teams to implement and improve security controls and processes.

1. Conduct phishing simulations and other awareness exercises to assess employee susceptibility to social engineering attacks.
2. Provide targeted training to enhance resilience against cybersecurity threats.

1. Automate and improve incident response procedures, including playbook creation to reduce manual response efforts.
2. Monitor threats and vulnerabilities, conduct regular threat intelligence research, and develop detection rules using various tools.

1. Degree in Information Technology, Computer Science, Software Engineering, or a related field.
2. Knowledge of IT security issues and best practices, particularly in a fast-paced fintech environment.
3. Security certifications such as CEH, CompTIA Security+ (preferred but not required).
4. Strong communication, influencing, and stakeholder management skills.
5. Two to three years of experience working across teams to deliver security solutions and drive adoption.
6. Experience in developing and delivering security training programs.
7. Experience working in a culturally diverse environment.
8. Understanding of online technologies, payment methods, content delivery networks, REST APIs, microservices, and application development.
9. Programming and scripting knowledge (e.g., Bash, Python).
10. Strong cloud experience, with knowledge of AWS, GCP, and OCI.