Cyber Security Engineer

About the Job:
The company is the leading fintech platform in Saudi Arabia and the wider GCC region, with a mission to build the most customer-centric financial super-app. The company serves millions of users and partners with well-known brands such as SHEIN, Jarir, noon, IKEA, and Amazon. As Saudi’s first fintech unicorn, the company is backed by prominent investors and operates from its headquarters in Riyadh.

Your Role:
The company is seeking a Cyber Security Engineer to join our growing Cyber Security team. In this position, you will support the design, implementation, and maintenance of secure infrastructure and systems to protect the company’s platform and customers. You will contribute to initiatives ensuring best practices in cloud security, application security, and secure software development are embedded into our systems from the ground up. The role requires foundational knowledge of security principles, including threat modeling and vulnerability management, and involves close collaboration with IT, Engineering, DevOps, and product teams.

Your Responsibilities Include:

• Supporting the design and continuous improvement of secure systems in alignment with the company’s security strategy.
• Participating in security assessments, threat modeling, and reviews for services.
• Identifying and remediating vulnerabilities across various environments.
• Collaborating with engineering teams to embed security controls within CI/CD pipelines.
• Assisting in the deployment and maintenance of security tools.
• Reviewing system designs and code changes for security risks.
• Contributing to the monitoring and response processes for security events.
• Developing technical security skills and contributing to documentation and procedures.

Your Expertise:

• 0–3 years of experience in Cyber Security, IT Security, or related roles.
• Basic understanding of secure coding practices and common vulnerabilities (e.g., OWASP Top 10).
• Exposure to cloud environments (e.g., GCP, OCI, AWS) with interest in security hardening.
• Familiarity with containerized environments (e.g., Docker, Kubernetes) is a plus.
• Foundational knowledge of security frameworks or standards (e.g., SAMA CSF, NCA, ISO 27001, NIST).
• Experience with scripting or automation (Python, Bash, etc.) for security tasks.
• Strong problem-solving skills and a willingness to learn.
• Entry-level or early-career security certifications (e.g., eJPT, CEH) are a plus.

All qualified individuals are encouraged to apply.