Cybersecurity Operations Engineer

About Novelus

Novelus is a company focused on accelerating technology deployment through innovation. The company prioritizes its employees by fostering a progressive, vibrant, and empowering culture. This role offers an opportunity to join a company experiencing significant growth.

The Role: Cybersecurity Operations Engineer

Novelus is seeking a Cybersecurity Operations Engineer for a full-time position in Makkah, with locations including Jeddah and Makkah. This role involves 2-5 years of experience in security operations, focusing on endpoint security, incident handling, and vulnerability management within an enterprise environment.

Key Responsibilities

• Review and validate EDR and security-monitoring alerts, investigate affected users or devices, and escalate incidents according to severity and response processes.
• Administer approved endpoint policies and controls, performing containment actions within delegated authority and obtaining necessary approvals for disruptive changes.
• Review perimeter security configurations and proposed changes with the infrastructure team, identifying weak rules, access exposures, and configuration gaps for remediation.
• Conduct approved vulnerability assessments, validate findings, prioritize them by exposure and business impact, assign owners, and verify remediation.
• Support privileged-access reviews, security baseline checks, and compliance evidence, maintaining an exception register and reporting unresolved risks.
• Assist with security gap assessments, risk assessments, control implementation, and policy updates within the agreed IT scope.
• Maintain audit evidence, support internal and external audits, and track corrective actions to closure.

Qualifications and Experience

• 3-5 years of experience in security operations, including hands-on endpoint security, incident handling, vulnerability assessment, and remediation coordination.
• Experience protecting enterprise users, servers, and networks is preferred.
• Prioritized training in deployed EDR, SIEM, and firewall vendors, vulnerability analysis, and incident-response exercises.
• Microsoft Certified Security Operations Analyst Associate (SC-200) is relevant if Microsoft security tools are used.
• Practical knowledge of EDR, SIEM, and firewalls; Windows and Linux security fundamentals; incident investigation; vulnerability interpretation; and risk-based remediation.
• Working knowledge of ISO/IEC 27001, Information Security Management Systems (ISMS), and Governance, Risk and Compliance (GRC) practices. This includes risk assessments, security controls, compliance reviews, audit evidence preparation, policy and procedure management, control-gap identification, corrective-action tracking, and support for ISO 27001 certification and surveillance audits.

Required Skills

• Clear technical reporting.
• Evidence handling.
• Risk-register maintenance.
• Collaboration with infrastructure, application, compliance, and audit teams.
• Security governance learning as responsibilities expand.

Work Environment and Benefits

Novelus offers a friendly and collaborative work environment. Employees benefit from personal and professional growth opportunities and exposure to dynamic projects and the latest technologies.