Application & Security Architecture Consultant📣 Job Ad

About Ahlan Cyber and the Role

Ahlan Cyber is seeking an Application & Security Architecture Consultant to join its team. This role focuses on enhancing the cybersecurity posture of organizations by critically evaluating and strengthening their entire cybersecurity toolset and architecture. The consultant will play a pivotal role in identifying areas for improvement and implementing robust security solutions.

Role Overview

The consultant will be responsible for assessing all existing security applications and controls within an organization. This includes identifying gaps, inefficiencies, and potential vulnerabilities. A core aspect of the role involves delivering clear, prioritized recommendations for improvements and changes designed to reduce risk and significantly strengthen the overall security posture.

Key Responsibilities

• Conduct comprehensive audits of existing cybersecurity applications, tools, and platforms (*, SIEM, EDR/XDR, IAM, firewalls, DLP, vulnerability scanners) to assess coverage, redundancy, and gaps.
• Evaluate the effectiveness, performance, and ROI of current security tools, recommending consolidation, replacement, or upgrades as appropriate.
• Design and maintain the enterprise security architecture roadmap, ensuring alignment of tools and controls with business objectives and risk appetite.
• Identify gaps in the current security posture and propose prioritized, actionable remediation plans with clear timelines and ownership.
• Define and enforce security architecture standards, frameworks, and reference architectures (*, NCA, NIST CSF, ISO 27001, CIS Controls, Zero Trust) across the organization.
• Review and validate the configuration and deployment of security applications to ensure optimal tuning.
• Perform vendor and tool evaluations for new cybersecurity technologies, including proof-of-concept testing and cost-benefit analysis.
• Collaborate with IT, DevOps, and application teams to embed security architecture principles into new projects, cloud migrations, and SDLC processes.
• Assess integration and interoperability between security tools to eliminate blind spots and reduce alert fatigue.
• Recommend and assist in implementing automation and orchestration (SOAR) opportunities to improve detection and response efficiency.
• Review risk assessments and threat modeling for critical applications, infrastructure, and third-party integrations.
• Review network, endpoint, cloud, and application security controls, recommending architecture changes to reduce the attack surface.
• Support incident response and forensic investigations by evaluating tool visibility and recommending improvements.
• Develop and present findings, risk ratings, and improvement roadmaps to leadership and key stakeholders in clear, business-relevant language.
• Ensure compliance of tools and architecture with applicable regulatory and industry requirements (*, GDPR, HIPAA, PCI-DSS, SOC 2).
• Maintain up-to-date documentation of the security tool inventory, architecture diagrams, data flows, and control mappings.
• Stay current on emerging threats, attack techniques, and security technologies, proactively advising on relevant innovations.
• Mentor internal security staff and support knowledge transfer to strengthen long-term in-house security capability.

Candidate Profile

The ideal candidate is a pragmatic and detail-oriented security professional. This role requires the ability to move fluidly between hands-on tool evaluation and strategic architecture recommendations. Effective communication of findings to both technical teams and leadership is essential.

Experience and Work Type

Candidates should possess 5 to 10 years of relevant experience in cybersecurity architecture and application security. This is a full-time position.

Location

This role is based in Al Khobar, within the Eastern region.