IT Security Engineer_SAUDI📣 إعلان

About the Role

Astek Middle East is seeking an experienced IT Security Engineer to join a leading organization in Riyadh, Saudi Arabia. This full-time role focuses on protecting the organization's IT environment, operating within the government and critical infrastructure sector. The successful candidate will manage enterprise security technologies, monitor cyber threats, strengthen security controls, and ensure compliance with industry best practices and regulatory standards.

Role Purpose

As an IT Security Engineer, you will play a key role in safeguarding critical digital assets. This involves collaborating with infrastructure, cybersecurity, and business teams to continuously enhance the organization's security posture. The position requires proactive management of security platforms and a responsive approach to incidents and emerging threats.

Key Responsibilities

• Administer, maintain, and optimize enterprise security technologies, including Firewalls, Endpoint Protection, Email Security, IDS/IPS, DLP, VPN, and IAM.
• Monitor, investigate, and respond to security alerts, incidents, service requests, and change requests.
• Perform security patch management, system hardening, and regular updates across security platforms.
• Conduct vulnerability assessments, coordinate remediation activities, and track security findings to closure.
• Design, implement, and continuously improve security controls and operational security procedures.
• Continuously monitor networks, systems, and applications to identify cyber threats, vulnerabilities, and operational risks.
• Support infrastructure upgrades, server migrations, and enterprise technology projects while ensuring security best practices.
• Develop, maintain, and enhance IT security policies, standards, and operating procedures.
• Participate in security risk assessments, vendor security reviews, and compliance initiatives.
• Coordinate with internal cybersecurity teams and external stakeholders during security incidents.
• Prepare operational reports, security metrics, and executive summaries related to security operations.
• Ensure compliance with security standards and frameworks, including ISO 27001, NIST, and organizational security policies.
• Advise technical and business stakeholders on cybersecurity risks and mitigation strategies.
• Participate in on-call support for critical security incidents when required.

Qualifications and Experience

• Education: Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related discipline. Professional cybersecurity certifications (*, CISSP, CISM, CompTIA Security+, CEH, GIAC, CCNP Security, CCIE Security, SANS Certifications) are highly preferred.
• Experience: Minimum of 7 years of experience in IT Infrastructure and IT Security.
• Proven experience supporting enterprise security operations within highly regulated environments.
• Strong hands-on experience managing enterprise security platforms and technologies.
• Experience in security operations, incident response, vulnerability management, risk assessment, and compliance.
• Strong knowledge of security frameworks, including NIST CSF, ISO 27001, and MITRE ATT&CK.
• Experience administering enterprise security solutions such as Palo Alto Firewalls, Fortinet FortiGate, F5, CrowdStrike, Nessus, and Endpoint Protection Platforms.
• Knowledge of cloud security principles across AWS, Azure, or GCP is an advantage.

Required Skills and Attributes

• Strong understanding of network security, malware, ransomware, phishing attacks, and modern cyber threats.
• Excellent analytical, troubleshooting, communication, and stakeholder management skills.
• Ability to perform effectively in high-pressure environments and during critical security incidents.

Preferred Background

Candidates with experience in Banking and Financial Services will be highly preferred due to their exposure to highly regulated environments, mature security operations, and strict compliance requirements. Experience within Government, Defense, Telecommunications, Healthcare, or other critical infrastructure organizations is also highly desirable.