business analyst

cloud engineer

afc data analyst

data analyst

senior business analyst

cybersecurity analyst

Egis Group

<div><b>Job Description</b><p></p><p><b><br>
SPECIFIC RESPONSIBILITIES</b>:</p><ul><li>
Responsible for the operational tasks for account administration, eDiscovery, incident response, waiver/policy assistance, and implementation of cyber security/protection technologies for the Project information and process systems/applications.</li><li>
Acts as contact with suppliers to develop technical solutions for computer security needs and makes recommendations to management.</li><li>
Develops, maintains, and audits the analytical and technical aspects of major computer security systems.</li><li>
Maintains the confidentiality, integrity, and availability of computer workstations, servers, and local area networks by maintaining user accounts and upgrading systems and software as required.</li><li>
Responsible for secure operations of security equipment, secure transmission of sensitive unclassified information and protection of cryptographic principles and methods.</li><li>
Mitigates threats and vulnerabilities that are associated with potentially compromising corporate and client data.</li><li>
Provides technical support, training, and timely computer system data recovery to end-users.</li><li>
Oversees the investigation of computer security incidents and acts as an assistant for cyber security initiatives.</li><li>
Conducts operations of computer protection measures and creates measurement tools for system vulnerability assessments.</li><li>
Serves on project teams and internal committees to represent cyber security interests.</li><li>
Oversee the client/server/infrastructure group on appropriate procedures for computer/system security.</li></ul><br>
<b>
Qualifications</b><p><b><br>
Required Skills and Experience:</b></p><ul><li>
15+ years of professional experience in cybersecurity roles, with at least 5 years in a senior or leadership capacity</li><li>
Advanced knowledge of network security, threat analysis, and incident response procedures</li><li>
Proficiency with security tools and platforms, including firewalls, SIEM systems, and intrusion detection systems</li><li>
Strong understanding of security protocols, vulnerability management, and risk assessment methodologies</li><li>
Experience with security auditing, compliance frameworks, and regulatory requirements</li><li>
Demonstrated expertise in firewall configuration, network segmentation, and access control implementation</li><li>
Excellent analytical and problem-solving skills with the ability to make decisive security decisions</li><li>
Strong organizational and project management capabilities</li><li>
Proficiency in security documentation and technical report writing</li></ul><p><b>
Preferred Skills and Experience:</b></p><ul><li>
Experience with cloud security platforms and hybrid security architectures</li><li>
Knowledge of penetration testing and ethical hacking methodologies</li><li>
Familiarity with security information and event management (SIEM) tools</li><li>
Understanding of encryption technologies and data protection mechanisms</li><li>
Experience with digital forensics and malware analysis</li><li>
Knowledge of cybersecurity requirements specific to the Middle East region</li><li>
Familiarity with local Saudi Arabian compliance standards and regulations</li></ul><p><b>
Certifications and Domain Expertise:</b></p><ul><li>
CISSP (Certified Information Systems Security Professional) or equivalent certification preferred</li><li>
CEH (Certified Ethical Hacker) or similar advanced security certification</li><li>
CCNA Security or comparable networking security certification</li><li>
Domain expertise in enterprise security, information security management, and risk management</li></ul></div>

Cybersecurity Specialist Senior - Metro

Naseej

<p></p><div><div><p>We usually respond within a day</p>
</div>
<div></div><div><div><h5 class="jobSectionHeader"><b>Company Description:</b></h5>
<p>Naseej is a leading technology company committed to harnessing the power of digital transformation in learning &amp; knowledge management by enabling our customers to provide rich experiences for their users and adapt to a dynamic technology landscape while reducing their technical burden enabling them to focus on achieving their strategic objectives. And for almost 36 years, Naseej with its branches all over the MENA region had made many contributions to be one of the market leaders in the fields of E-Learning, Edu-Tech &amp; Digital transformation. Naseej website: <b>https://www.naseej.com/</b></p>
<h5 class="jobSectionHeader"><b>Job Summary:</b></h5>
<p>The Penetration Tester (Offensive Security Specialist) is responsible for planning and executing authorized simulated attacks against networks, applications, and infrastructure to identify security weaknesses before malicious actors can exploit them. This role requires strong hands-on offensive security expertise and the ability to translate technical findings into clear, actionable remediation guidance.</p>
<h5 class="jobSectionHeader"><b>Key Responsibilities:</b></h5>
<ul><li><p>Plan, scope, and conduct penetration tests across web applications, networks, APIs, mobile applications, and cloud and on-premise infrastructure.</p>
</li><li><p>Perform vulnerability assessments and validate findings to eliminate false positives.</p>
</li><li><p>Conduct manual exploitation beyond automated scanning to assess real-world risk.</p>
</li><li><p>Execute social engineering and phishing simulations where authorized.</p>
</li><li><p>Document findings in clear, detailed reports including risk ratings, business impact, and prioritized remediation recommendations.</p>
</li><li><p>Present results and debrief both technical teams and non-technical stakeholders.</p>
</li><li><p>Retest remediated vulnerabilities to confirm effective closure.</p>
</li><li><p>Stay current with emerging threats, attack techniques, exploits, and security tools.</p>
</li><li><p>Support red team exercises and collaborate with blue team / SOC where required.</p>
</li><li><p>Ensure all testing is conducted within agreed scope, rules of engagement, and applicable regulations.</p>
</li></ul><h5 class="jobSectionHeader"><b>Requirements</b><b>:</b></h5>
<ul><li><p>Bachelor&rsquo;s degree in Cybersecurity, Computer Science, Information Technology, or a related field.</p>
</li><li><p>3&ndash;4 years of dedicated, hands-on penetration testing / offensive security experience (experience must be directly and fully related to the role).</p>
</li><li><p>Strong knowledge of common vulnerabilities and frameworks (e.g., OWASP Top 10, MITRE ATT&amp;CK).</p>
</li><li><p>Proficiency with industry tools such as Burp Suite, Metasploit, Nmap, Nessus, Kali Linux, and similar.</p>
</li><li><p>Solid understanding of networking protocols, operating systems (Windows/Linux), and web technologies.</p>
</li><li><p>Scripting ability (e.g., Python, Bash, or PowerShell) for custom tooling and automation.</p>
</li><li><p>Strong report-writing and communication skills in English and Arabic.</p>
</li><li><p>Relevant certifications such as OSCP or CEH, GPEN, eJPT/eCPPT, or equivalent.</p>
</li></ul><h5 class="jobSectionHeader"><b>Key Competencies:</b></h5>
<ul><li><p>Strong analytical and problem-solving mindset.</p>
</li><li><p>Attention to detail and a methodical approach to testing.</p>
</li><li><p>Ability to work independently and manage testing engagements end to end.</p>
</li><li><p>Awareness of Saudi regulatory and compliance frameworks (e.g., NCA controls) is an advantage.</p>
</li></ul></div></div><div><div><div><div>Department</div>
<div>Cyber Security</div>
<div>Locations</div>
<div>Riyadh</div>
<div>Employment type</div>
<div>Full-time</div>
</div></div></div><p></p><div><div><div><div>Contact Atheer Alnasser Regional Talent Acquisition Specialist &ndash; Human Resources &amp; Admin Support
</div></div></div></div><p></p><div><div><div><div>
</div></div></div></div><div><div><div><h2 class="jobSectionHeader"><b>About Naseej</b></h2>
<div><p>Bringing together the latest technological advancement and know-how to support organizations in their digital transformation journey, Naseej offers a comprehensive suite of platforms and services, to empower organizations and enable them to focus on achieving their strategic objectives, fostering innovation, and maximizing productivity in the digital era.</p>
</div></div><div><div>Founded in 1989
</div><div>Co-workers 500</div></div></div></div></div><p></p>

Penetration Tester (Offensive Security Specialist)

Public Investment Fund (PIF)

<div>
 <p>
  PIF is seeking a candidate to join International Investments team to provide insights on PIF&rsquo;s direct investments in the assigned regions/geographies, lead streamlined investment transaction process and effective portfolio management and monitoring of investment performance, and ensure the development of industry expertise and market knowledge in Tactical Investments across sectors including, but not limited to, Automotive, Mobility, Technology, Software, Augmented Reality, Robotics, and related industries.
 </p>
 <p>
  <br/>
 </p>
 <p>
  <strong>
   Specialized Accountabilities
  </strong>
 </p>
 <ul>
  <li>
   Contribute to the identification, evaluation, selection, and management of International Direct Investments (includes, among others, equity investments with an influential ownership in listed or private companies) and ensure alignment with the overall investment policy at PIF.
  </li>
  <li>
   Contribute to co-underwriting opportunities alongside leading general partners and sponsors in Tactical Investments.
  </li>
  <li>
   Prepare the transaction process including managing team members in the construction of financial models and multi-criteria valuation approaches, managing advisors, negotiating terms, and closing documentation for International Direct Investments.
  </li>
  <li>
   Prepare investment memos, recommendations on new deals, internal update reports, and required updates to PIF Board and related Committees and/or other entities.
  </li>
  <li>
   Engage in portfolio management process with a mindset of ownership e.g., review major strategic matters, business plans, board nominations, etc.
  </li>
  <li>
   Contribute to operational improvements and strategic initiatives at portfolio companies, collaborating with management teams to deliver growth, enhance efficiency, and drive value creation.
  </li>
  <li>
   Manage multiple concurrent projects and transaction workstreams, demonstrating strong multitasking.
  </li>
  <li>
   Analyze International Direct Investments portfolio performance and recommend corrective actions and ensure remaining up to date with market developments and trends
  </li>
  <li>
   Contribute to the process of exiting investments at appropriate times, including raising recommendations for approval and managing the exit process.
  </li>
  <li>
   Collaborate with institutional investors, investment banks and financial advisors
  </li>
  <li>
   Develop and maintain a network of industry experts/firms including identification and onboarding and ensure the maintenance and utilization of respective relations.
  </li>
  <li>
   Proactively monitor the developments shaping the investment landscape and markets, via desktop research and leveraging internal tools / databases and external networks (e.g. investment banks, general partners, venture capitalists, institutional investors, etc.)
  </li>
  <li>
   Prepare presentations and updates on International Direct Investments proposals and performance to PIF Committees and Executive Management.
  </li>
  <li>
   Contribute to the development and training to junior team members e.g., provide mentorship and coaching.
  </li>
 </ul>
 <p>
  <br/>
 </p>
 <p>
  <strong>
   Common Accountabilities
  </strong>
 </p>
 <ul>
  <li>
   Implement operational excellence improvement initiatives and propose improvements on systems, processes, and practices considering PIF established policies and procedures and international leading practices.
  </li>
  <li>
   Support the development of policies, systems, processes, procedures, and controls as requested or propose relevant enhancements as needed, ensuring alignment and adherence to any relevant compliance, risk, audit, cybersecurity, and regulatory requirements.
  </li>
 </ul>
 <p>
  <br/>
 </p>
 <p>
  <strong>
   Qualifications / Years of Experience
  </strong>
 </p>
 <ul>
  <li>
   Minimum: Bachelor&rsquo;s in Business Administration, Finance, Economics, Engineering, or any other relevant discipline
  </li>
  <li>
   4+ years deal and project management experience in investment banking, private equity, strategy/management consulting, or corporate development/M&amp;A.
  </li>
  <li>
   Any relevant certification such as Chartered Financial Analyst (CFA), Financial Risk Manager (FRM), Certified International Investment Analyst (CIIA), Chartered Alternative Investment Analyst (CAIA), etc.
  </li>
 </ul>
 <p>
  <br/>
 </p>
 <p>
  <strong>
   Personal Competencies
  </strong>
 </p>
 <ul>
  <li>
   Good communication skills (written and oral) with the ability to convince the stakeholders.
  </li>
  <li>
   Ability to establish credibility with stakeholders.
  </li>
  <li>
   Ability to adapt to rapidly changing business needs.
  </li>
  <li>
   Strong organizational/project management skills, the ability to manage and achieve multiple deadlines.
  </li>
  <li>
   Ability to motivate, guide, and inspire others to achieve common goals and vision.
  </li>
 </ul>
</div>


Tactical Investment Professional

muvi Cinemas

<div>
 <p>
  <strong>
   Job Title: Cybersecurity Engineer
  </strong>
 </p>
 <p>
  <strong>
   Location:
  </strong>
  Riyadh, Saudi Arabia
 </p>
 <p>
  <strong>
   Company:
  </strong>
  Muvi Cinemas
 </p>
 <p>
  <strong>
   Role Overview:
  </strong>
 </p>
 <p>
  We are seeking a highly skilled and proactive Cybersecurity Engineer to join the IT Department at Muvi Cinemas and protect the organization's networks, systems, applications, and data from cyber threats. Reporting to the Director of TechOps, the role is responsible for designing, implementing, and maintaining security infrastructure, identifying vulnerabilities, responding to security incidents, implementing security controls, and ensuring compliance with cybersecurity frameworks and regulatory requirements. This position plays a critical role in safeguarding Muvi Cinemas' digital assets, customer data, point-of-sale systems, and entertainment technology platforms while ensuring adherence to Saudi National Cybersecurity Authority (NCA) regulations and international security standards.
 </p>
 <p>
  <strong>
   Key Responsibilities:
  </strong>
 </p>
 <p>
  <strong>
   Security Infrastructure &amp; Architecture
  </strong>
 </p>
 <ul>
  <li>
   Design, implement, and manage cybersecurity infrastructure including firewalls, intrusion detection/prevention systems (IDS/IPS), SIEM, endpoint protection, and network security solutions.
  </li>
  <li>
   Develop and maintain security architecture aligned with Muvi Cinemas' business requirements, industry best practices, and regulatory standards.
  </li>
  <li>
   Deploy and configure security tools across on-premises, cloud, and hybrid environments supporting cinema operations, ticketing systems, and corporate infrastructure.
  </li>
  <li>
   Implement network segmentation, zero-trust architecture, and defense-in-depth strategies to protect critical assets including POS systems, customer databases, and entertainment platforms.
  </li>
  <li>
   Evaluate and recommend new security technologies, tools, and solutions to enhance the organization's security posture.
  </li>
  <li>
   Manage and optimize security information and event management (SIEM) platforms for real-time monitoring and threat detection.
  </li>
 </ul>
 <p>
  <strong>
   Vulnerability Management &amp; Penetration Testing
  </strong>
 </p>
 <ul>
  <li>
   Conduct regular vulnerability assessments and penetration testing across networks, systems, applications, and infrastructure.
  </li>
  <li>
   Identify, classify, and prioritize security vulnerabilities based on risk severity and business impact.
  </li>
  <li>
   Develop and track remediation plans with system owners and IT teams to address identified vulnerabilities.
  </li>
  <li>
   Perform security code reviews and application security assessments for web applications, mobile apps, and customer-facing platforms.
  </li>
  <li>
   Manage vulnerability scanning tools and maintain vulnerability databases and tracking reports.
  </li>
  <li>
   Conduct red team/blue team exercises and adversary simulations to test organizational defenses.
  </li>
 </ul>
 <p>
  <strong>
   Security Operations &amp; Incident Response
  </strong>
 </p>
 <ul>
  <li>
   Monitor security events, alerts, and logs using SIEM and security monitoring tools to detect and respond to threats in real-time.
  </li>
  <li>
   Lead incident response activities including identification, containment, eradication, recovery, and post-incident analysis.
  </li>
  <li>
   Develop and maintain incident response plans, playbooks, and escalation procedures.
  </li>
  <li>
   Conduct forensic investigations and root cause analysis for security incidents and breaches.
  </li>
  <li>
   Coordinate with internal teams and external partners during security incidents.
  </li>
  <li>
   Prepare incident reports and present findings and recommendations to management.
  </li>
 </ul>
 <p>
  <strong>
   Data Protection &amp; Privacy
  </strong>
 </p>
 <ul>
  <li>
   Implement data protection controls to safeguard customer personal data, payment card information, and business-sensitive data.
  </li>
  <li>
   Ensure compliance with PCI DSS (Payment Card Industry Data Security Standard) requirements for payment processing and point-of-sale systems.
  </li>
  <li>
   Support data classification, data loss prevention (DLP), and encryption strategies.
  </li>
  <li>
   Monitor and enforce data handling policies across all business units and technology platforms.
  </li>
  <li>
   Ensure compliance with Saudi Personal Data Protection Law (PDPL) and related regulations.
  </li>
 </ul>
 <p>
  <strong>
   Network &amp; Endpoint Security
  </strong>
 </p>
 <ul>
  <li>
   Manage and maintain network security devices including firewalls, VPNs, WAFs, and proxy servers.
  </li>
  <li>
   Implement and manage endpoint detection and response (EDR) solutions across all corporate and operational endpoints.
  </li>
  <li>
   Monitor network traffic for anomalies, unauthorized access, and potential security threats.
  </li>
  <li>
   Secure wireless networks, IoT devices, and operational technology (OT) systems across cinema locations.
  </li>
  <li>
   Manage access control systems, identity management, and multi-factor authentication (MFA) implementations.
  </li>
 </ul>
 <p>
  <strong>
   Cloud Security
  </strong>
 </p>
 <ul>
  <li>
   Implement and manage security controls for cloud environments (AWS, Azure, GCP, or similar).
  </li>
  <li>
   Conduct cloud security assessments and ensure proper configuration of cloud services.
  </li>
  <li>
   Monitor cloud workloads, storage, and applications for security threats and compliance.
  </li>
  <li>
   Develop and enforce cloud security policies and governance frameworks.
  </li>
 </ul>
 <p>
  <strong>
   Compliance &amp; Regulatory Adherence
  </strong>
 </p>
 <ul>
  <li>
   Ensure compliance with Saudi National Cybersecurity Authority (NCA) regulations, Essential Cybersecurity Controls (ECC), and related frameworks.
  </li>
  <li>
   Support compliance with PCI DSS, ISO 27001, NIST, and other applicable security standards.
  </li>
  <li>
   Prepare and maintain documentation for security audits, certifications, and regulatory assessments.
  </li>
  <li>
   Conduct security risk assessments and maintain risk registers.
  </li>
  <li>
   Stay updated on evolving cybersecurity regulations, threats, and industry trends.
  </li>
 </ul>
 <p>
  <strong>
   Security Awareness &amp; Training
  </strong>
 </p>
 <ul>
  <li>
   Develop and deliver cybersecurity awareness training programs for employees across all Muvi Cinemas locations.
  </li>
  <li>
   Conduct phishing simulations and social engineering exercises to assess and improve organizational security awareness.
  </li>
  <li>
   Create security guidelines, best practices, and communication materials for staff education.
  </li>
  <li>
   Foster a culture of security awareness and responsibility across the organization.
  </li>
 </ul>
 <p>
  <strong>
   Documentation &amp; Reporting
  </strong>
 </p>
 <ul>
  <li>
   Maintain comprehensive security documentation including policies, procedures, standards, and guidelines.
  </li>
  <li>
   Prepare regular security reports, dashboards, and metrics for the Director of TechOps and CIO.
  </li>
  <li>
   Document security architectures, configurations, and operational procedures.
  </li>
  <li>
   Track and report on security KPIs, incident trends, and compliance status.
  </li>
 </ul>
 <p>
  <strong>
   Qualifications:
  </strong>
 </p>
 <ul>
  <li>
   <strong>
    Bachelor's degree in Cybersecurity, Computer Science, Information Technology, Network Engineering, or a related field.
   </strong>
  </li>
  <li>
   <strong>
    Fluency in English (written and spoken) is mandatory.
   </strong>
  </li>
  <li>
   Proficiency in Arabic is preferred.
  </li>
  <li>
   Minimum 3-5 years of experience in cybersecurity engineering, security operations, or information security roles.
  </li>
  <li>
   <strong>
    Professional cybersecurity certifications are mandatory (one or more of the following): CEH, CompTIA Security+, CCNA Security, OSCP, GIAC, or equivalent.
   </strong>
  </li>
  <li>
   Advanced certifications such as CISSP, CISM, or CCSP are a strong advantage.
  </li>
  <li>
   Strong hands-on experience with security tools including firewalls (Palo Alto, Fortinet, Cisco ASA), SIEM platforms (Splunk, QRadar, Sentinel), IDS/IPS, EDR, and vulnerability scanners.
  </li>
  <li>
   Experience with cloud security (AWS, Azure, or GCP).
  </li>
  <li>
   Knowledge of PCI DSS compliance requirements for payment and retail environments.
  </li>
  <li>
   Familiarity with Saudi NCA Essential Cybersecurity Controls (ECC) and regulatory frameworks.
  </li>
  <li>
   Experience with ISO 27001, NIST Cybersecurity Framework, or similar standards.
  </li>
  <li>
   Strong understanding of networking protocols, operating systems (Windows, Linux), and scripting (Python, Bash, PowerShell).
  </li>
 </ul>
 <p>
  <strong>
   Key Competencies:
  </strong>
 </p>
 <ul>
  <li>
   Strong technical knowledge of cybersecurity infrastructure and security operations.
  </li>
  <li>
   Excellent analytical, problem-solving, and critical thinking abilities.
  </li>
  <li>
   Proactive threat detection and incident response capabilities.
  </li>
  <li>
   Strong understanding of network security, endpoint security, and cloud security.
  </li>
  <li>
   Data protection and privacy compliance expertise.
  </li>
  <li>
   Excellent communication and documentation skills.
  </li>
  <li>
   Ability to work under pressure and respond to security incidents effectively.
  </li>
  <li>
   Continuous learning mindset and passion for cybersecurity.
  </li>
  <li>
   Team collaboration and cross-functional coordination skills.
  </li>
  <li>
   Professionalism, integrity, and confidentiality.
  </li>
 </ul>
</div>


Cyber Security Engineer

<p></p><div><div><p>We usually respond within a day</p>
</div>
<div></div><div><div><h5 class="jobSectionHeader"><b>Company Description:</b></h5>
<p>Naseej is a leading technology company committed to harnessing the power of digital transformation in learning &amp; knowledge management by enabling our customers to provide rich experiences for their users and adapt to a dynamic technology landscape while reducing their technical burden enabling them to focus on achieving their strategic objectives. And for almost 36 years, Naseej with its branches all over the MENA region had made many contributions to be one of the market leaders in the fields of E-Learning, Edu-Tech &amp; Digital transformation. Naseej website: <b>https://www.naseej.com/</b></p>
<h5 class="jobSectionHeader"><b>Job Summary:</b></h5>
<p>This role is responsible for identifying, assessing, and managing cybersecurity risks for a project within the <b>Saudi Ministry of Commerce</b>. It supports the implementation of risk management processes, maintains risk registers, and ensures compliance with applicable regulatory and industry frameworks such as NCA, SAMA, and ISO 27001.</p>
<h5 class="jobSectionHeader"><b>Key Responsibilities:</b></h5>
<ul><li><p>Conduct cybersecurity risk assessments to identify, evaluate, and document risks, threats, vulnerabilities, and control gaps.</p>
</li><li><p>Maintain and update risk registers, ensuring risks are accurately tracked, monitored, and reported.</p>
</li><li><p>Support the development, implementation, and monitoring of risk treatment and mitigation plans to reduce project and organizational risk exposure.</p>
</li><li><p>Prepare periodic risk reports and dashboards, and coordinate with stakeholders to ensure timely remediation of identified risks.</p>
</li><li><p>Ensure alignment with the cybersecurity and regulatory requirements applicable to the Saudi Ministry of Commerce project.</p>
</li><li><p>Assist in ensuring compliance with cybersecurity regulatory requirements and standards, including NCA, SAMA, and ISO 27001.</p>
</li><li><p>Support internal and external audits, compliance assessments, and risk-related governance activities.</p>
</li></ul><h5 class="jobSectionHeader"><b>Requirements</b><b>:</b></h5>
<ul><li><p>Saudi National</p>
</li><li><p>Bachelor&rsquo;s degree in Cybersecurity, Information Security, or a related field</p>
</li><li><p>3&ndash;5 years of practical experience in cybersecurity compliance or GRC</p>
</li></ul></div></div><div><div><div><div>Department</div>
<div>Oper - Project Management</div>
<div>Locations</div>
<div>Riyadh</div>
<div>Nationalities that can apply.</div>
<div>Saudis</div>
</div></div></div><p></p><div><div><div><div>Contact Fatma Kamal Regional Talent Acquisition Senior Specialist &ndash; Human Resources &amp; Admin Support
</div></div></div></div><p></p><div><div><div><div>
</div></div></div></div><div><div><div><h2 class="jobSectionHeader"><b>About Naseej</b></h2>
<div><p>Bringing together the latest technological advancement and know-how to support organizations in their digital transformation journey, Naseej offers a comprehensive suite of platforms and services, to empower organizations and enable them to focus on achieving their strategic objectives, fostering innovation, and maximizing productivity in the digital era.</p>
</div></div><div><div>Founded in 1989
</div><div>Co-workers 500</div></div></div></div></div><p></p>

Governance, Risk & Compliance specialist

By Light Professional IT Services

<div>Company Overview:
<div>
By Light Professional IT Services LLC readies warfighters and federal agencies with technology and systems engineered to connect, protect, and prepare individuals and teams for whatever comes next. Headquartered in McLean, VA, By Light supports defense, civilian, and commercial IT customers worldwide.</div>
Position Overview:
<div>
Provides mission‑critical Communications and Information Technology Services (CITS) support to the U.S. Military Training Mission (USMTM) in Riyadh, Saudi Arabia, ensuring secure, reliable, and continuous NIPR/SIPR network operations across all functional areas. Contributes to the installation, administration, maintenance, and modernization of IT systems supporting USMTM J6 and mission partners, including helpdesk, network, server, cybersecurity, and project management activities. Operates within DoW, USARCENT, CENTCOM, and NETCOM standards to sustain enterprise connectivity, data integrity, and operational readiness. Each position under this contract plays a vital role in maintaining the confidentiality, availability, and integrity of USMTM&rsquo;s communications infrastructure while delivering responsive, professional, and compliant technical services throughout the 12‑month period of performance.</div>
Responsibilities:
<ul><li>Serve as the on‑site lead for all contract operations under the USMTM CITS program, providing daily technical and administrative oversight across helpdesk, network, systems, and cybersecurity functions.</li><li>
Act as the primary interface with USMTM J6 leadership, ensuring alignment of contractor activities with mission priorities, operational schedules, and performance standards.</li><li>
Implement disciplined project governance, risk management, and quality assurance consistent with Department of War (DoW), USARCENT, CENTCOM, and NETCOM directives.</li><li>
Develop and maintain project plans, timelines, and milestones in coordination with the Contract Program Manager, tracking execution and reporting progress against deliverables.</li><li>
Provide leadership, direction, and technical guidance to all contractor personnel, ensuring adherence to configuration control, change management, and ITIL‑based service delivery processes.</li><li>
Coordinate with higher‑tier organizations (RCC‑SWA, NETCOM, CENTCOM) for escalated network, cybersecurity, and enterprise service issues.</li><li>
Oversee continuity of operations (COOP) planning, ensuring uninterrupted network and communications support during outages or emergencies.</li><li>
Maintain accountability for contract deliverables, personnel performance, and compliance with all PWS requirements, including reporting and documentation standards.</li><li>
Ensure all work centers meet or exceed Acceptable Quality Levels (AQLs) defined in the Performance Requirements Summary Table.</li><li>
Support transition‑in and transition‑out activities, ensuring seamless handover of responsibilities, assets, and documentation.</li><li>
Provide monthly operational and performance summaries to the Contract Program Manager, highlighting risks, corrective actions, and mission impacts.</li><li>
Foster a culture of professionalism, responsiveness, and mission focus among all contractor staff, ensuring effective collaboration with Government and mission partners.</li></ul>
Required Experience/Qualifications:
<ul><li>Education: Bachelor&rsquo;s degree in Information Technology, Computer Science, Cybersecurity, or a related field.</li><li>
Certifications: PMP or CompTIA Project+, Security+ CE, and ITIL v4 Foundation.</li><li>
Minimum of 10 years of experience in IT operations, network administration, systems integration, or enterprise service delivery.</li><li>
At least 5 years of leadership experience supporting Department of War (DoW) or U.S. Government programs in deployed, overseas, or mission‑critical environments.</li><li>
Demonstrated experience managing daily IT operations across helpdesk, network, server, and cybersecurity functions in accordance with PWS requirements.</li><li>
Proven ability to develop project plans, manage schedules, track milestones, and oversee quality control for complex IT service delivery contracts.</li><li>
Experience coordinating with higher‑tier organizations such as RCC‑SWA, CENTCOM, and NETCOM for escalated support, enterprise integration, and change management.</li><li>
Strong understanding of configuration control, ITIL‑based service management, and enterprise patching and compliance processes.</li><li>
Strong written and verbal communication skills for coordination with Government leadership, mission partners, and contractor personnel.</li></ul>
Preferred Experience/Qualifications:
<ul><li>Master&rsquo;s degree in Information Technology, Cybersecurity, Business Administration, or a related field.</li><li>
Project Management Professional (PMP), ITIL v4 Managing Professional, CISSP, or CASP+ certifications.</li><li>
Fifteen or more years of progressive leadership experience supporting Department of War (DoW) or U.S. Government IT operations in deployed or international environments.</li><li>
Demonstrated success managing multi‑discipline IT service delivery teams and coordinating with higher‑tier organizations such as RCC‑SWA, CENTCOM, and NETCOM.</li><li>
Experience developing and implementing Continuity of Operations (COOP) plans, risk mitigation strategies, and performance metrics aligned to Acceptable Quality Levels (AQLs).</li><li>
Proven ability to lead transition‑in and transition‑out activities, including staff mobilization, asset transfer, and knowledge handover.</li><li>
Background in cybersecurity policy implementation, configuration control, and change management within classified network environments.</li><li>
Strong interpersonal and cross‑cultural communication skills for collaboration with U.S. personnel and host‑nation counterparts.</li></ul>
Special Requirements/Security Clearance:
<ul><li>Requires a Secret Security Clearance.</li></ul></div>

Site Manager

COGNNA

<div><p>As <b>a Threat Detection COOP </b>at COGNNA, you&rsquo;ll design high-impact detection strategies, build powerful automation, and elevate SOC operations to a world-class standard. You&rsquo;ll also mentor rising cyber talent and collaborate with teams across threat intel, incident response, and platform engineering.<br>
<br>
<b>Advanced Threat Detection Engineering</b></p><ul><li>
Build high-fidelity correlation rules and behavioral detections within the COGNNA security platforms.</li><li>
Translate adversary TTPs (MITRE ATT&amp;CK), threat intel, and vulnerability data into actionable logic.</li><li>
Identify detection gaps and introduce new data sources to cover evolving threat landscapes.</li><li>
Automate detection testing and maintain detection quality over time.</li></ul><p></p><ul><li><b>️ Platform Engineering &amp; Optimization</b></li></ul><ul><li>
Lead architecture and optimization of XDR, SIEM, and SOC tech stacks for scale and resilience.</li><li>
Streamline log ingestion pipelines &mdash; from parsing to normalization and enrichment.</li><li>
Build scripts and automations (Python, PowerShell) to enhance SOC efficiency.</li>
Integrate tools across the SOC stack to enable seamless workflows and response.<br>
<li>
</li></ul><p><b>️&zwj;</b><b>️ Threat Hunting &amp; Incident Response</b></p><ul><li>
Collaborate with intel and IR teams to enrich detection use cases and support threat hunts.</li><li>
Provide Tier-3+ support for incident investigations and post-mortem analysis.</li></ul><p></p><p><b>
Mentorship &amp; SOC Maturity</b></p><ul><li>
Improve SOC playbooks, SOPs, and detection engineering workflows.</li><li>
Stay updated on global and regional threats &mdash; and evolve detection accordingly.</li><li>
Ensure compliance alignment (e.g., NCA ECC, SAMA CSF).</li></ul><br>
<b>
Requirements</b><p><b><br>
Minimum Requirements (Must Haves):</b></p><ul><li><b>
Education:</b> Currently enrolled in their final year of a Bachelor&rsquo;s degree in Computer Science, Cybersecurity, Information Technology, or a closely related field, with graduation planned within or immediately following the 6-month co-op.</li><li><b>
Foundational Security Knowledge:</b> Basic understanding of cybersecurity concepts, including common attack vectors, the Windows/Linux operating system internals, and network protocols.</li><li><b>
Programming/Scripting Basics:</b> Familiarity with writing simple scripts in Python or PowerShell to automate repetitive tasks or parse data.</li><li><b>
Log &amp; System Familiarity:</b> Basic understanding of what logs are (e.g., Windows Event Logs, Syslog) and an interest in how they are collected and analyzed.</li><li><b>
Duration:</b> Availability to commit to a full-time (or near full-time, depending on university rules) 6-month continuous Co-op assignment.</li></ul><p><b>
Preferred Qualifications (Nice to Haves / Big Plusses):</b></p><ul><li><b>
Framework Familiarity:</b> Conceptual knowledge of the MITRE ATT&amp;CK framework and how it maps to adversary behaviors.</li><li><b>
Hands-on Exposure:</b> Previous experience using SIEM/XDR platforms, or building a home lab (e.g., Splunk, Elastic, Wireshark).</li><li><b>
Regulatory Awareness:</b> A general awareness of cybersecurity frameworks or local compliance standards (like NCA ECC or SAMA CSF).</li><li><b>
Soft Skills:</b> Strong analytical mindset, a high level of curiosity to dig into threat trends, and excellent written documentation skills.</li></ul><br>
<b>
Benefits</b><p><br>
<b>Impact that Matters</b> &ndash; Build products that shape the future of cybersecurity and protect organizations globally.
</p><p><b>On-Site Collaboration</b> &ndash; Be at the heart of innovation in our Riyadh office, working side by side with passionate experts.
</p><p><b>Continuous Growth</b> &ndash; Access to certifications, trainings, and opportunities to sharpen your expertise.
</p><p><b>Culture of Trust</b> &ndash; We empower talent, encourage ownership, and celebrate real outcomes.</p></div>

Threat Detection - COOP

Explore 39+ Cybersecurity analyst in Riyadh this July. Find roles across top companies and apply now to boost your career.