Cyber Security Specialist

The Cyber Security Specialist will strengthen the organization’s security posture by implementing, monitoring, and enhancing cyber defense mechanisms across critical government systems. This role requires hands-on expertise in threat detection, incident response, governance frameworks, and secure infrastructure operations. Candidates outside Saudi Arabia are welcome, provided they meet the technical and regulatory requirements of government-grade security environments.

Key Responsibilities:

1. Security Operations & Monitoring

   • Monitor SIEM, IDS/IPS, endpoint security, and network security tools for real-time threat detection.
   • Perform log analysis, correlation, and triage of security alerts.
   • Lead containment, eradication, and recovery activities during cyber incidents.

2. Incident Response & Forensics

   • Develop and execute incident response playbooks aligned with government standards.
   • Conduct digital forensics investigations, evidence collection, and root-cause analysis.
   • Prepare incident reports for senior leadership and regulatory bodies.

3. Governance, Risk & Compliance (GRC)

   • Ensure compliance with Saudi government frameworks such as NCA ECC, NCA CCC, NCA CSCC, and SAMA CSF (if applicable).
   • Support risk assessments, vulnerability assessments, and security audits.
   • Maintain security documentation, policies, and procedures.

4. Infrastructure & Application Security

   • Implement hardening standards for servers, endpoints, cloud environments, and network devices.
   • Conduct secure code reviews and application security assessments.
   • Collaborate with IT teams to ensure secure architecture design.

5. Security Tools & Technology Management

   • Manage and optimize tools such as SIEM (Splunk/QRadar/ArcSight), EDR/XDR, DLP, PAM, WAF, and vulnerability scanners.
   • Evaluate new technologies and recommend enhancements to the security stack.

6. Awareness & Training

   • Conduct cybersecurity awareness sessions for employees.
   • Support phishing simulations and behavioral security programs.

Required Qualifications:

• Education & Certifications:

  • Bachelor’s degree in Cyber Security, Computer Science, Information Technology, or related field.
  • Preferred certifications: CISSP, CISM, CEH, CompTIA Security+, GIAC (GCIH, GCIA), ISO 27001 LA.

• Technical Skills:

  • Strong knowledge of network security, endpoint protection, and cloud security (Azure/AWS).
  • Experience with SIEM, EDR, DLP, and vulnerability management platforms.
  • Understanding of secure architecture, encryption, IAM, and zero-trust principles.
  • Familiarity with government cybersecurity frameworks (NCA, SAMA, CITC).

• Experience:

  • 4–8 years of hands-on cybersecurity experience, preferably in government, defense, or critical infrastructure.
  • Proven track record in incident response, SOC operations, or security engineering.

Language Requirements:

• Proficiency in Arabic and English is preferred.