Cyber Security Engineer

The company is the leading fintech platform in Saudi Arabia and the wider GCC region, aiming to build the most customer-centric financial super-app. The company serves millions of users and partners with globally recognized brands, including SHEIN, Jarir, noon, IKEA, and Amazon.

The company is seeking a Cyber Security Engineer to join our growing Cyber Security team. In this role, you will support the design, implementation, and maintenance of secure infrastructure and systems to protect the company's platform and customers. Your responsibilities will include ensuring best practices in cloud security, application security, and secure software development are integrated into our systems from the ground up.

This position requires a foundational understanding of security principles such as threat modeling, vulnerability management, and secure architecture. You will collaborate with IT/Engineering, DevOps/Platform, and product teams to support security-by-design practices and address evolving security risks. As an early-career engineer, you will be hands-on, proactive in learning, and take ownership of security improvements while enhancing the company's security operations.

Your Responsibilities:

• Support the design, implementation, and continuous improvement of secure systems and infrastructure.
• Participate in security assessments, threat modeling, and reviews for services.
• Identify, investigate, and assist in the remediation of vulnerabilities across various environments.
• Collaborate with engineering teams to embed security controls within CI/CD pipelines.
• Assist with the deployment and maintenance of security tools.
• Review system designs and code changes to identify security risks.
• Support monitoring and response to security events in coordination with SOC.
• Contribute to documentation and continuously develop technical security skills.

Your Expertise:

• 0–3 years of experience in Cyber Security, IT Security, DevSecOps, or a related field.
• Basic understanding of secure coding practices and common vulnerability types (e.g., OWASP Top 10).
• Exposure to cloud environments (e.g., GCP, OCI, AWS).
• Familiarity with containerized environments (e.g., Docker, Kubernetes) is a plus.
• Foundational knowledge of security frameworks or standards (e.g., SAMA CSF, ISO 27001).
• Experience with basic scripting or automation (Python, Bash).
• Strong problem-solving skills and ability to collaborate effectively.
• Entry-level security certifications (or pursuit of them) such as eJPT, CEH, or cloud security certifications (GCP or AWS) are a plus.

All qualified individuals are encouraged to apply.