Cyber Security Infrastructure Engineer

About the Role

Prospex Development is seeking a dedicated Cyber Security Infrastructure Engineer to manage and optimize core security infrastructure. This full-time role, based in Riyadh, Saudi Arabia, involves the daily administration, policy configuration, health monitoring, and compliance reviews of critical security technologies. The ideal candidate will have 2-5 years of experience and will work closely with internal teams to maintain a robust security posture.

Key Responsibilities

• Email Security & Mail Gateway Administration (Fortinet Mail GW): Monitor service health, mail flow, and system performance. Configure and maintain email security policies, including anti-spam, anti-malware, and phishing protection. Investigate and resolve mail delivery issues and execute software upgrades.
• Web Application Security & WAF Administration (Fortinet WAF): Configure and maintain Fortinet WAF policies, virtual servers, and security profiles. Manage SSL/TLS inspection and digital certificates. Onboard new web applications and APIs, and monitor WAF logs for malicious activities.
• Advanced Threat Analysis & Sandboxing (Fortinet Sandbox): Configure and maintain Forti Sandbox security policies, malware analysis profiles, and IOC generation. Deploy and maintain integrations between Forti Sandbox and the Mail Gateway. Plan and execute firmware upgrades and signature updates.
• Firewall Policy Review & Compliance Optimization (FireMon): Perform periodic reviews of firewall policies across multi-vendor environments using FireMon. Identify critical security risks such as overly permissive or redundant rules. Configure FireMon policy analysis, compliance frameworks, and reporting modules.

Qualifications and Experience

• Proven hands-on experience in administering Fortinet security solutions, including Mail GW, Sandbox, and WAF.
• Experience with firewall policy management tools such as FireMon.
• A minimum of 2 years and a maximum of 5 years of relevant professional experience.

Technical Skills

• Deep understanding of email security protocols and web application firewall configurations.
• Proficiency in SSL/TLS inspection, malware analysis, and firewall rule optimization.

Compliance and Problem-Solving

• Ability to translate regulatory standards and organizational security policies into technical configurations and security controls.
• Strong troubleshooting capabilities for diagnosing mail flow disruptions, application connectivity barriers, and policy-related vulnerabilities.

Work Environment

This is a full-time position based in Riyadh, Saudi Arabia, requiring close collaboration with internal teams to ensure adherence to organizational policies and regulatory requirements.