Cybersecurity Specialist📣 Job Ad

About the Role

Petromin Corporation is seeking a dedicated Cybersecurity Specialist to join its team in Jeddah, Makkah, Saudi Arabia. This full-time position is for an individual with 0-1 years of experience who will be instrumental in establishing and operating core hands-on cybersecurity controls for the organization. As one of the first dedicated cybersecurity hires, this role offers an opportunity to shape and implement critical security measures across Petromin's systems, users, branches, and digital platforms.

The Cybersecurity Specialist will be responsible for a broad range of security functions, including monitoring, identity and access management, endpoint, email, network, and cloud security. A key aspect of this role involves the responsible use of approved AI and automation tools to enhance efficiency, improve reporting, accelerate threat triage, and reduce manual effort, all while rigorously protecting confidential data.

Key Responsibilities

• Establish, operate, and continuously improve day-to-day cybersecurity controls across Petromin systems, users, branches, and digital platforms.
• Monitor security alerts from Microsoft 365 / Entra, endpoint protection, firewalls, email security, SIEM / MSSP tools, and other sources; investigate and escalate promptly.
• Administer core security controls including Multi-Factor Authentication (MFA), privileged access management, endpoint protection, email and web security, secure configuration baselines, and periodic access reviews.
• Perform vulnerability scanning, patch validation, configuration hardening, and risk-based remediation tracking in collaboration with IT infrastructure and application teams.
• Support incident response activities by triaging alerts, collecting evidence, containing threats, coordinating recovery efforts, documenting root causes, and improving incident response playbooks.
• Build and maintain practical security policies, standards, Standard Operating Procedures (SOPs), asset and control inventories, exception logs, and security dashboards.
• Conduct phishing awareness campaigns and deliver security training and user guidance in coordination with HR, IT, and business units.
• Review new systems, cloud services, integrations, and vendor solutions for cybersecurity risks prior to deployment.
• Utilize approved AI and automation tools responsibly to accelerate alert triage, threat research, reporting, policy drafting, scripting, and other repetitive security tasks without exposing confidential data.
• Support audits, provide compliance evidence, conduct risk assessments, perform third-party security reviews, assist with backup and Disaster Recovery (DR) testing, and contribute to management reporting.

Qualifications and Requirements

• Bachelor's degree in Cybersecurity, Information Technology, Computer Science, Engineering, or equivalent practical experience.
• Hands-on knowledge of Microsoft 365 / Entra ID, MFA, Identity and Access Management (IAM), Endpoint Detection and Response (EDR) / antivirus, firewalls, VPN, email security, and vulnerability management tools.
• Ability to investigate security alerts, document evidence, and coordinate incident containment and recovery processes.
• Practical understanding of secure configuration principles, patching strategies, backup procedures, DR testing, and third-party security reviews.
• Proficiency in using approved AI and automation tools, scripting languages such as PowerShell or Python, or no-code automation platforms to enhance productivity.
• Strong discipline in documentation, follow-up, communication, and maintaining confidentiality.

Technical Skills

• Microsoft 365 / Entra
• Endpoint Protection
• Firewalls
• Email Security
• SIEM and MSSP tools
• Multi-Factor Authentication (MFA)
• Privileged Access Management
• Vulnerability Scanning
• Incident Response
• Phishing Awareness and Security Training
• Cloud Security
• Network Security
• Identity and Access Management (IAM)
• Endpoint Detection and Response (EDR)
• VPN
• Secure Configuration
• Patching
• Backups
• Disaster Recovery (DR)
• Third-Party Security Reviews
• AI and Automation Tools
• Scripting (PowerShell, Python)

Additional Information

• This is a full-time position located in Jeddah, Makkah, Saudi Arabia.
• Experience required is 0-1 years.
• Professional certifications such as Security+, CySA+, CEH, SC-200, AZ-500, CCNA Security, or ISO 27001 Foundation are preferred. Microsoft security certifications are considered a plus.
• Proficiency in English is required; Arabic is preferred.
• Experience in a lean environment is preferred.

Professional Competencies

• Strong documentation skills.
• Effective follow-up and communication abilities.
• Commitment to maintaining confidentiality.