Cybersecurity Engineer

We are looking for a skilled and proactive Cybersecurity Engineer to strengthen our organization's security posture and protect our enterprise IT infrastructure, retail systems, POS environments, e-commerce platforms, and cloud environments. The successful candidate will be responsible for implementing and managing enterprise security solutions, including Next-Generation Firewalls (NGFW), Endpoint Detection and Response (EDR/XDR), Network Access Control (NAC), Web Application Firewalls (WAF), and SIEM platforms. This role will also support compliance with Saudi National Cybersecurity Authority (NCA) requirements, PCI-DSS, ISO/IEC 27001, and other relevant cybersecurity standards. Key Responsibilities: • Network Security: Design, implement, and manage firewalls, network segmentation, VPNs, and secure connectivity across corporate offices, retail stores, warehouses, and data centers. • Endpoint Security: Manage endpoint protection, EDR/XDR, malware prevention, and security hardening across servers, POS systems, laptops, and other enterprise devices. • Network Access Control & Identity Security: Implement NAC solutions and enforce access controls, MFA, identity management, and privileged access management (PAM). • Web & E-Commerce Security: Manage WAF solutions and protect customer-facing applications, APIs, and e-commerce platforms against cyber threats, DDoS attacks, and malicious traffic. • Cloud Security: Implement and maintain security controls across AWS, Azure, and hybrid environments, including IAM, encryption, network security, logging, and cloud security posture monitoring. • Security Monitoring & Incident Response: Monitor security events through SIEM platforms, investigate incidents, coordinate response activities, and implement corrective actions. • Vulnerability Management: Conduct vulnerability assessments, coordinate penetration testing, manage remediation activities, and ensure timely security patching. • Governance & Compliance: Support compliance with NCA cybersecurity requirements, ISO/IEC 27001, NIST frameworks, PCI-DSS, and internal security policies. • Risk Management & Documentation: Conduct cybersecurity risk assessments, maintain security documentation, prepare compliance evidence, and report on vulnerabilities and security incidents. • Cross-Functional Collaboration: Work closely with infrastructure, cloud, network, application, and DevOps teams to integrate security into enterprise operations and technology projects. Requirements & Qualifications: • Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, or a related discipline. • 3–5 years of relevant experience in cybersecurity or information security. • Hands-on experience with enterprise security technologies, particularly firewalls, NAC, WAF, endpoint security, EDR/XDR, and SIEM. • Strong understanding of network security, routing, switching, VPNs, wireless security, and network segmentation. • Practical knowledge of cloud security across AWS, Azure, or hybrid environments. • Familiarity with IAM, MFA, PAM, vulnerability management, and incident response processes. • Good understanding of the Saudi NCA Cybersecurity Framework and relevant cybersecurity regulatory requirements in KSA. • Working knowledge of ISO/IEC 27001, NIST Cybersecurity Framework, and PCI-DSS. • Strong analytical, troubleshooting, communication, and problem-solving skills. Preferred Qualifications: • Professional certifications such as Security+, CEH, CISSP, CISM, CCSP, ISO/IEC 27001 Lead Implementer, Fortinet certifications, or AWS Certified Security – Specialty. • Experience securing retail environments, POS systems, and high-transaction e-commerce platforms. • Experience working with Security Operations Center (SOC) teams and incident response functions.