Security Design & Implementation Senior Expert

About the Role

stc is seeking a Security Design & Implementation Senior Expert to join its team in Riyadh, Saudi Arabia. This full-time role is responsible for leading the design, implementation, and continuous enhancement of cybersecurity solutions across the company's networks, systems, applications, and devices. The position requires advanced technical expertise to strengthen the resilience and security of the technology environment.

Role Purpose and Context

The role holder will provide advanced technical expertise in security architecture, preventive and detective controls, SOC capabilities, vulnerability management, and incident response. All duties will be carried out in accordance with stipulated business policies and procedures to ensure robust cybersecurity measures are in place and continuously improved.

Key Responsibilities

• Lead the design and enhancement of network security frameworks to protect infrastructure, technology assets, and data, aligning with cybersecurity strategies, regulatory requirements, and industry standards.
• Drive the development and continuous enhancement of network and cybersecurity architecture to strengthen resilience against evolving threats.
• Define and maintain device-level security standards for Mission-Critical and Business-Critical environments, including access controls, encryption standards, and authentication protocols.
• Drive the design, implementation, and continuous enhancement of Mission-Critical Security Operations Center (SOC) capabilities to strengthen proactive threat detection, incident response, and mitigation.
• Oversee technical coordination with vendors on SOC deployment, cybersecurity solutions, and system upgrades, ensuring compliance with technical and security requirements.
• Evaluate and enhance preventive and detective security solutions, including firewalls, IDS/IPS, and endpoint protection.
• Lead the integration and optimization of advanced threat detection technologies, including SIEM, EDR, and IDS/IPS, to enhance real-time monitoring and response capabilities.
• Lead vulnerability assessment activities across systems, networks, and applications, prioritize identified weaknesses, and coordinate remediation activities.
• Enhance penetration testing and vulnerability management methodologies based on emerging threats and evolving cybersecurity practices.
• Develop and continuously enhance incident response playbooks and communication protocols for effective response and escalation of cybersecurity incidents, including Mission-Critical-related breaches.
• Provide technical recommendations and security insights to stakeholders on cybersecurity risks, architecture improvements, and required security enhancements.

Qualifications and Experience

Candidates should possess 5-10 years of relevant experience in cybersecurity design and implementation. The role requires a strong background in security architecture, preventive and detective controls, SOC capabilities, vulnerability management, and incident response.

Work Environment

This is a full-time position based in Riyadh, Riyadh, Saudi Arabia. The role involves working within a dynamic environment focused on strengthening cybersecurity resilience across the organization's technology landscape.

Application Process

Further details regarding the application process and salary will be disclosed to qualified candidates.