Role Summary
The Cyber Security Specialist will strengthen the organization's security posture by implementing, monitoring, and enhancing cyber defense mechanisms across critical government systems. The role requires hands‑on expertise in threat detection, incident response, governance frameworks, and secure infrastructure operations. Candidates outside Saudi Arabia are welcome, provided they meet the technical and regulatory requirements of government‑grade security environments.
Key Responsibilities
1. Security Operations & Monitoring
- Monitor SIEM, IDS/IPS, endpoint security, and network security tools for real‑time threat detection.
- Perform log analysis, correlation, and triage of security alerts.
- Lead containment, eradication, and recovery activities during cyber incidents.
2. Incident Response & Forensics
- Develop and execute incident response playbooks aligned with government standards.
- Conduct digital forensics investigations, evidence collection, and root‑cause analysis.
- Prepare incident reports for senior leadership and regulatory bodies.
3. Governance, Risk & Compliance (GRC)
- Ensure compliance with Saudi government frameworks such as NCA ECC, NCA CCC, NCA CSCC, and SAMA CSF (if applicable).
- Support risk assessments, vulnerability assessments, and security audits.
- Maintain security documentation, policies, and procedures.
4. Infrastructure & Application Security
- Implement hardening standards for servers, endpoints, cloud environments, and network devices.
- Conduct secure code reviews and application security assessments.
- Collaborate with IT teams to ensure secure architecture design.
5. Security Tools & Technology Management
- Manage and optimize tools such as SIEM (Splunk/QRadar/ArcSight), EDR/XDR, DLP, PAM, WAF, and vulnerability scanners.
- Evaluate new technologies and recommend enhancements to the security stack.
6. Awareness & Training
- Conduct cybersecurity awareness sessions for employees.
- Support phishing simulations and behavioral security programs.
Required Qualifications
Education & Certifications
- Bachelor's degree in Cyber Security, Computer Science, Information Technology, or related field.
- Preferred certifications: CISSP, CISM, CEH, CompTIA Security+, GIAC (GCIH, GCIA), ISO 27001 LA.
Technical Skills
- Strong knowledge of network security, endpoint protection, and cloud security (Azure/AWS).
- Experience with SIEM, EDR, DLP, and vulnerability management platforms.
- Understanding of secure architecture, encryption, IAM, and zero‑trust principles.
- Familiarity with government cybersecurity frameworks (NCA, SAMA, CITC).
Experience
- 4–8 years of hands‑on cybersecurity experience, preferably in government, defense, or critical infrastructure.
- Proven track record in incident response, SOC operations, or security engineering.
