Lead Security Engineer

About DXC Technology

DXC Technology assists global companies in managing their mission-critical systems and operations. The company focuses on modernizing IT, optimizing data architectures, and ensuring security and scalability across public, private, and hybrid cloud environments. Serving large companies and public sector organizations, DXC deploys services to enhance performance, competitiveness, and customer experience across IT estates. With over 125,000 employees in more than 70 countries, DXC delivers transformative technologies to support businesses and individuals worldwide.

Role Overview

DXC Technology is seeking an L3 Data & Endpoint Security Engineer – Advanced Support & Architecture to join the team in Riyadh, Saudi Arabia. This full-time role requires 5-10 years of experience and involves owning the end-to-end design, hardening, and incident response for SAMA-mandated Data- and Endpoint-Security controls across a broad technology stack. The position serves as the final escalation point for complex security incidents, leads architecture reviews, and ensures alignment with SAMA CSF domains PRV-03 (Data Security) and DE-02 (Endpoint Protection).

Key Responsibilities

• Design highly available DLP/DAM clusters, encryption key hierarchies, and EDR telemetry pipelines.
• Integrate all security platforms with SIEM (QRadar) and SOAR for automated response.
• Lead P1/P2 incidents, including data-loss breaches, ransomware, and insider misuse across the full toolset.
• Perform deep packet and forensic analysis, issuing formal root-cause analysis reports with preventive actions.
• Build and fine-tune ForcePoint DLP policies, Seclore rights templates, and Cortex detections to meet business and regulator SLAs.
• Maintain classification and retention schemes in accordance with SAMA SecReg.
• Map control operations to SAMA / NCA ECC evidence, prepare audit artifacts, and lead regulator walkthroughs.
• Conduct quarterly tool health and efficacy reviews, and drive remediation programs.
• Create run-books, tabletop exercises, and lab simulations, and coach three L2 engineers.
• Recommend budget and roadmap items, including licensing, hardware, and SaaS migration.

Role Contribution

This position involves designing highly available clusters and pipelines, leading root-cause analysis for critical incidents, and fine-tuning policies across multiple platforms. The engineer will also maintain compliance with regulatory frameworks. A key leadership aspect of this role includes mentoring L2 engineers, building run-books and simulations, and contributing to budget and roadmap planning for the security toolset.

Required Experience and Expertise

Candidates should possess 5-10 years of relevant experience. This is a high-visibility role that requires deep technical expertise and the ability to interface directly with auditors, regulators, and senior leadership. The successful candidate will ensure the organization's data and endpoint security posture meets stringent regulatory and business requirements.