Cyber Security Specialist

About the Role

Sahm Capital is seeking a Cyber Security Specialist to join our team in Riyadh, Saudi Arabia. This full-time role involves designing, implementing, and operating technical cybersecurity controls across the organization. The specialist will focus on securing infrastructure, reviewing system and cloud architectures, managing vulnerabilities, and supporting penetration testing activities, ensuring alignment with internal security standards and Saudi cybersecurity requirements.

Key Responsibilities

• Deploy, configure, and manage cybersecurity tools including DLP, EDR, firewalls, and IAM solutions.
• Support secure configuration of systems, servers, endpoints, and cloud environments.
• Monitor security events and support SOC operations for threat detection and response.
• Review system applications and cloud architectures from a security perspective, identifying design weaknesses and recommending improvements.
• Conduct regular vulnerability assessments across infrastructure and applications, tracking and prioritizing remediation.
• Coordinate and support third-party penetration testing activities and validate findings.
• Support incident detection, investigation, and response activities, assisting in maintaining and improving procedures.
• Participate in security investigations and root cause analysis.
• Support system hardening activities across servers, endpoints, and network devices, ensuring security baselines are implemented.

Qualifications and Experience

• Bachelor’s degree in Cybersecurity, Information Security, Computer Science, or an equivalent field.
• 3–6 years of experience in cybersecurity operations, SOC, or security engineering roles.
• Proven experience implementing NCA ECC, CMA Cybersecurity Guidelines, SDAIA PDPL rules, and Tadawul security framework is preferred.
• Knowledge of Brand Protection / Digital Risk Protection (DRP) tools (*, BrandShield, PhishLabs, Recorded Future) and domain takedown mechanisms.
• Knowledge of cybersecurity tools such as SIEM, EDR, firewalls, and IAM.
• Understanding of vulnerability management, incident response, and risk management principles.
• Basic understanding of email security (DMARC, DKIM, SPF) and phishing defense.

Required Skills

• Strong documentation and coordination skills.
• Ability to manage multiple tasks in a structured environment.
• Team-oriented attitude with the ability to support colleagues and teams with technical problems.
• Strong interpersonal communication and relationship-building skills.
• Ability to manage time effectively and prioritize numerous projects.
• Organized, attentive to detail, flexible with changing priorities, and able to communicate professionally.

Work Environment

This is a full-time position based in Riyadh, Saudi Arabia, offering an opportunity to contribute to the cybersecurity posture of Sahm Capital.