Information Technology Security Administrator

Role - Information Technology Security Administrator

Years of experience – 7+years

Location – Riyadh, Saudi Arabia

Job Summary:

We’re looking for a proactive Security Operations Engineer / SOC Analyst to strengthen our security posture and safeguard our infrastructure.

Key Responsibilities:

1. Security Operations

• Monitor security tools and dashboards (SIEM, EDR, firewall logs, IDS/IPS).

• Detect, analyze, and respond to security incidents following incident response procedures.

• Conduct daily security health checks across infrastructure (servers, endpoints, network devices).

2. Access & Identity Management

• Administer user accounts, permissions, and roles across Active Directory, Azure AD, and business applications.

• Enforce least-privilege, MFA, and password policies.

• Regularly audit and certify access rights.

3. Endpoint & Infrastructure Security

• Manage endpoint protection solutions (EDR/AV).

• Implement patch management for servers, workstations, and network appliances.

• Maintain configuration baselines aligned with security best practices.

4. Network & Perimeter Security

• Manage firewall rules, VPNs, and security policies.

• Support IDS/IPS systems and network access control (NAC).

• Monitor and maintain secure network segmentation.

5. Threat & Vulnerability Management

• Perform vulnerability scans and coordinate remediation with IT teams.

• Track security findings until closure and maintain vulnerability logs.

• Stay informed on emerging threats, zero-days, and security advisories.

6. Compliance & Policy Enforcement

• Enforce IT security policies, SOPs, and standards (ISO 27001, NCA/ESS, CIS).

• Maintain audit logs and evidence for internal/external audits.

• Support risk assessments and compliance reviews.

7. Documentation & Reporting

• Maintain security documentation, asset inventories, and operational procedures.

• Prepare periodic security reports (incidents, vulnerabilities, compliance status).

• • Document lessons learned from security events.