Lead, Information Security (Defensive)

About the Role
We are looking for a Lead Cyber Security Engineer to join our Information Security team in Riyadh. You will provide technical leadership across defensive security while managing a team of security engineers and analysts, and driving security initiatives across the organization.

Key Responsibilities

• Lead security architecture and design reviews across IT, cloud, and product initiatives.
• Drive cloud security across GCP and AWS, including IAM, security posture, and infrastructure security.
• Own the Secure SDLC / DevSecOps program, including SAST, DAST, SCA and container security.
• Lead vulnerability management, penetration testing and red team engagements.
• Oversee endpoint, infrastructure and firewall security.
• Drive detection engineering, threat intelligence and complex incident response.
• Develop and mentor a team of cybersecurity engineers and analysts.
• Partner with Engineering, IT, Compliance, and other teams to improve overall security posture.

Skills, Knowledge and Expertise

• 5+ years of cybersecurity experience, including technical leadership or senior-level responsibilities.
• Strong experience across security architecture, cloud security, AppSec/DevSecOps, and vulnerability management.
• Hands-on understanding of offensive and defensive security, including penetration testing, red/purple teaming, and incident response.
• Experience with SIEM, EDR/XDR, CSPM, DLP, and vulnerability management platforms.
• Strong knowledge of GCP/AWS, IAM, Terraform, Kubernetes, and CI/CD security.
• Experience with SAST, DAST, SCA and secure SDLC practices.
• Knowledge of SAMA CSF, NCA ECC, PCI-DSS, and ISO 27001.
• Strong technical leadership, stakeholder management, and team development skills.
• CISSP/CISM and OSCP or equivalent certifications are required.