Staff Infrastructure & Security Engineer

About the Job:

The company is a rapidly growing technology firm revolutionising the field of Artificial Intelligence and Data Science. Headquartered in Riyadh, Saudi Arabia, the company is working to realise Vision 2030 with a proven track record of excellence in supporting and growing the tech ecosystem in Saudi Arabia and the GCC region. The company is the trusted AI technology partner for some of the largest government organisations, as well as many large corporations and startups.

As a Staff Infrastructure & Security Engineer, you will lead the design, implementation, and maintenance of the company’s security infrastructure. Reporting to the CISO, you will collaborate with IT and Engineering teams to protect the company’s networks, servers, and cloud services from threats. This includes securing cloud environments (GCP/OCI/AWS/Azure), managing on-premise and cloud networking (firewalls, VPNs, etc.), and overseeing security monitoring and incident response within the Cybersecurity Operations Team.

This senior role carries end-to-end responsibility for infrastructure security, encompassing both preventive measures like architecture hardening and vulnerability management, as well as responsive measures like incident investigation and remediation.

Responsibilities:

• Design, implement, and maintain security infrastructure, including firewalls, intrusion detection/prevention systems, VPN gateways, and cloud security controls.
• Take ownership of security for cloud platforms, implement best practices for cloud security posture management, identity and access management, and network segmentation.
• Monitor security alerts and events across infrastructure, using SIEM and MDR platforms.
• Conduct regular security assessments, scans, and penetration tests to identify vulnerabilities in systems and networks.
• Develop and enforce security protocols, policies, and procedures to protect sensitive information and systems.
• Oversee day-to-day security of networks, servers, and endpoints, managing network security devices and ensuring proper configurations.
• Collaborate with IT, DevOps, and Engineering teams to embed security into all projects and operations.

Qualifications:

• Bachelor’s or master’s degree in computer science, Information Security, or a related field. Equivalent experience and professional training are also considered.
• 7+ years of hands-on experience in cybersecurity engineering or infrastructure security roles, including experience in security operations.
• Proven expertise in managing and securing cloud environments (GCP, AWS, OCI, and/or Azure).
• Strong knowledge of enterprise network design and security, along with experience configuring and managing security devices.
• Hands-on experience with security monitoring and incident management tools, as well as vulnerability scanners.
• Good understanding of information security frameworks and standards, including ISO/IEC 27001 and NIST CSF.
• Excellent analytical skills and strong communication capabilities.

Preferred Certifications:

• Cloud Security Certifications (e.g., AWS Certified Security – Specialty, Microsoft Certified: Azure Security Engineer).
• Security Management Certifications (e.g., Certified Information Systems Security Professional - CISSP).
• Technical Security Certifications (e.g., Certified Cloud Security Professional - CCSP).

Why the company?

You will be at the forefront of an exciting time for the Middle East, joining a high-growth company in an exciting space. You will enjoy competitive compensation, top-tier health insurance, and an enabling culture to focus on your strengths. The company values diversity and aims to empower all employees to be the best version of themselves.