Cyber Security Engineer📣 إعلان

About the Role

Harjai Computers is seeking a Cyber Security Engineer to join their team in Riyadh. This full-time role focuses on managing and maintaining various Fortinet security solutions and performing firewall policy reviews using FireMon. The position requires 2-5 years of experience in a relevant field.

Key Responsibilities

The Cyber Security Engineer will be responsible for the management and maintenance of Fortinet security solutions and conducting firewall policy reviews. Specific areas of focus include:

• Fortinet Mail Gateway
• FortiSandbox
• Fortinet WAF
• Firewall Policy Review – FireMon

Fortinet Mail Gateway Management

• Monitor service health, mail flow, system performance, and availability of the Fortinet Mail Gateway environment.
• Configure and maintain email security policies, including anti-spam, anti-malware, anti-phishing, and email filtering.
• Investigate and resolve mail delivery issues, false positives/negatives, mail queue problems, and connectivity issues.
• Monitor email security events and troubleshoot email-related security incidents.
• Plan and execute software upgrades, firmware updates, and hotfix installations.
• Ensure email security configurations comply with organizational security policies and applicable regulatory requirements.

FortiSandbox and Fortinet WAF Operations

• Configure and maintain FortiSandbox security policies, malware analysis profiles, IOC generation, quarantine actions, and notification settings.
• Configure file submission policies and supported file types for malware analysis.
• Deploy, configure, and maintain integrations between FortiSandbox and Fortinet Mail Gateway.
• Monitor malware analysis activities and investigate suspicious or malicious files.
• Plan and execute firmware upgrades, hotfix installations, and signature updates.
• Ensure FortiSandbox configurations comply with organizational security policies and regulatory requirements.
• Configure and maintain Fortinet WAF policies, virtual servers, protected applications, and security profiles.
• Configure and manage SSL/TLS inspection and certificate management.
• Perform onboarding of new web applications and APIs into the Fortinet WAF platform.
• Validate application functionality following WAF policy implementation and changes.
• Monitor WAF logs, alerts, and security events to identify malicious activities, vulnerabilities, and web-based attacks.
• Investigate and troubleshoot WAF-related incidents and policy issues.
• Optimize WAF policies to maintain an appropriate balance between security and application availability.

Firewall Policy Review with FireMon

• Perform periodic firewall policy reviews across multi-vendor firewall environments using FireMon.
• Identify and assess security risks, including overly permissive rules, any-to-any access, shadowed rules, duplicate rules, redundant objects, and unused or obsolete firewall rules.
• Configure FireMon policy analysis, compliance policies, risk scoring, rule recertification, and reporting.
• Configure and maintain integrations between FireMon and supported firewall vendors.
• Analyze firewall policy posture and recommend rule optimization and risk remediation.
• Generate and analyze operational, compliance, and executive-level reports covering policy violations, rule optimization, security risks, and overall firewall risk exposure.

Qualifications and Experience

Candidates should possess 2-5 years of experience in cyber security, with a strong focus on Fortinet solutions and firewall policy management. The role requires a comprehensive understanding of email security, sandbox technologies, web application firewalls, and network security policy analysis.