information security engineer

Astek Middle East

<div>
 
 IT Security Engineer
 
 
 
 Summary
 
 
 
 We are looking for a Microsoft Security Engineer with expertise in Microsoft 365 (M365) security to design, implement, and manage enterprise security solutions across Microsoft cloud environments. The ideal candidate will ensure the protection of identities, data, servers and endpoints while optimizing security configurations in Microsoft Defender, Azure Security, and other M365 security solutions.
 
 
 
 
 
 
 Key Responsibilities
 
 
 
 
 M365 Security Implementation &amp; Management
 
 
 <ul>
 <li>
 Configure and manage Microsoft Defender for Endpoint, Office 365, Identity, and Cloud Apps to detect and prevent threats.
 </li>
 <li>
 Implement and maintain Microsoft Purview Compliance solutions (DLP, Insider Risk Management, Information Protection, eDiscovery).
 </li>
 <li>
 Secure Microsoft 365 services such as Exchange Online, SharePoint, OneDrive, and Teams by enforcing security policies.
 </li>
 </ul>
 
 
 
 
 
 Identity &amp; Access Management (IAM)
 
 
 <ul>
 <li>
 Deploy and manage Azure AD Conditional Access, MFA, Privileged Identity Management (PIM), and role-based access controls (RBAC).
 </li>
 <li>
 Configure and maintain Microsoft Entra ID security features to prevent unauthorized access.
 </li>
 <li>
 Implement / operate password less authentication, Single Sign-On (SSO), and Just-in-Time (JIT) access controls.
 </li>
 </ul>
 
 
 
 
 
 Threat Detection
 
 
 <ul>
 <li>
 Monitor and analyze security alerts using Microsoft Sentinel (SIEM), Defender XDR, and Microsoft Security Center.
 </li>
 <li>
 Investigate security incidents, respond to threats, and perform root cause analysis.
 </li>
 </ul>
 
 
 
 
 
 Compliance &amp; Risk Management
 
 
 <ul>
 <li>
 Conduct security assessments and audits to identify vulnerabilities and mitigate risks.
 </li>
 <li>
 Implement Data Loss Prevention (DLP) policies to protect sensitive data across Microsoft 365 services.
 </li>
 </ul>
 
 
 
 
 
 Endpoint &amp; Cloud Security
 
 
 <ul>
 <li>
 Deploy and manage Microsoft Intune (Endpoint Manager) for device security, compliance, and application control.
 </li>
 <li>
 Enforce Windows Defender security baselines, BitLocker encryption, and Microsoft Edge security configurations.
 </li>
 <li>
 Harden Microsoft cloud workloads and ensure Azure Security Center best practices are followed.
 </li>
 </ul>
 
 
 Required Skills &amp; Qualifications
 
 
 <ul>
 <li>
 5+ years of experience in Microsoft 365 Security, Azure Security, or Cloud Security Engineering.
 </li>
 <li>
 Expertise in Microsoft Defender XDR, Defender for Endpoint and Defender for Office 365
 </li>
 <li>
 Hands-on experience with Azure AD security features, including Conditional Access, MFA, PIM, and RBAC.
 </li>
 <li>
 Strong knowledge of Microsoft Intune (Endpoint Manager) and Windows security configurations.
 </li>
 <li>
 Experience with Data Loss Prevention (DLP), Information Protection, and compliance frameworks.
 </li>
 <li>
 Proficiency in PowerShell scripting for automation and security configurations.
 </li>
 <li>
 Familiarity with Microsoft Graph API and security integrations.
 </li>
 </ul>
 
 
 
 
 
 Preferred Certifications
 
 
 <ul>
 <li>
 Microsoft Certified: Cybersecurity Architect Expert
 </li>
 <li>
 Microsoft Certified: Security Operations Analyst Associate (SC-200)
 </li>
 <li>
 Microsoft Certified: Information Protection Administrator Associate (SC-400)
 </li>
 <li>
 Microsoft Certified: Identity and Access Administrator Associate (SC-300)
 </li>
 <li>
 Microsoft 365 Certified: Enterprise Administrator Expert
 </li>
 </ul>
 
 
 
 
 
 Education
 
 
 <ul>
 <li>
 Bachelor&rsquo;s or Master&rsquo;s degree in Cybersecurity, Computer Science, Information Security, or a related field (or equivalent experience).
 </li>
 </ul>
 
 
</div>

Information Technology Security Engineer

Easy Recruitment PK

Job Title: Security Engineer Experience: 5+ Years Location: Onsite &ndash; Riyadh, Saudi Arabia Contract Type: 1-Year Contract (Extendable)Job Description: We are looking for an experienced Security Engineer with 5+ years of experience to design, implement, and maintain security systems that protect organizational infrastructure, applications, and data. The ideal candidate should have strong knowledge of cybersecurity practices, risk management, and incident response.Key Responsibilities:<ul><li>Monitor and maintain security systems and infrastructure</li><li>Identify vulnerabilities and implement security controls</li><li>Conduct security assessments and risk analysis</li><li>Respond to security incidents and perform root cause analysis</li><li>Ensure compliance with security policies and standards</li></ul>Requirements:<ul><li>5+ years of experience in cybersecurity or information security</li><li>Knowledge of network security, firewalls, and threat detection</li><li>Experience with security tools (SIEM, IDS/IPS, etc.)</li><li>Understanding of security frameworks and best practices</li><li>Strong problem-solving and communication skills</li></ul>Pay: Up to ﷼12,000.00 per monthWork Location: In person

Security Engineer

CyberKnight

<div>
 
 We are looking to hire an Associate Cybersecurity Engineer to join our growing team in Riyadh. If you are passionate about cyber security and eager to build a strong career in the cyber security domain, we want to hear from you.
 
 
 
 
 
 
 Key Responsibilities:
 
 
 
 - Conduct presentations, demonstrations and proof of concepts of cybersecurity solutions.
 
 
 - Assist in implementation, deployment, administration, configuration and support of cybersecurity solutions.
 
 
 - Responding to RFPs and preparing technical documentation.
 
 
 
 
 
 
 Requirements:
 
 
 
 -
 
 
 Important
 
 
 : Valid Saudi Council of Engineers membership (Must have an active membership in the Saudi Council of Engineers,
 
 please attach your Saudi Council of Engineers Certificate along with your CV/Resume
 
 )
 
 
 - Experience: 0&ndash;2 years (Fresh Graduates are welcome to apply)
 
 
 - Ability to communicate effectively in both English and Arabic (fluency in both languages is a plus, but not required).
 
 
 - Graduated with an Engineering degree or similar qualifications (e.g., Cybersecurity, Computer Science, Software Engineering, IT, etc.).
 
 
 - Solid knowledge of the basics/fundamentals of Network, Operating Systems &amp; Cybersecurity
 
 
 - Good analytical, problem-solving, and communication skills
 
 
 - Ability to work collaboratively within a technical team
 
 
 
</div>

Associate Cybersecurity Engineer (Saudi National)

Prime Gate

<div>Job summary
 
 
Responsible for designing, implementing, and maintaining the organization&rsquo;s cybersecurity infrastructure and controls to protect information assets, systems, and networks from cyber threats. This role delivers proactive threat detection, incident response, vulnerability management, and security compliance aligned with NCA ECC/CCC frameworks and Saudi regulatory requirements, ensuring a resilient and secure operational environment. 
 
Key responsibility : 
<ul><li>Security Infrastructure Management: Deploy, configure, and maintain security solutions including firewalls, IDS/IPS, SIEM, WAF, EDR, DLP, and endpoint protection platforms to safeguard organizational assets
</li><li>Threat Monitoring &amp; Incident Response: Continuously monitor security events and alerts; investigate and respond to security incidents following documented incident response procedures; perform root cause analysis and implement corrective actions</li><li>Vulnerability Management: Conduct regular vulnerability assessments and penetration tests on systems, networks, and applications; prioritize and track remediation activities to minimize organizational risk
</li><li>Security Policy &amp; Compliance: Develop, maintain, and enforce security policies, standards, and procedures; ensure alignment with NCA ECC, CCC, OTCC, PDPL, and other applicable regulatory frameworks
</li><li>Cloud Security: Implement and monitor cloud security controls including CSPM, CWPP, and identity management across cloud platforms; ensure cloud workloads meet security baseline requirements</li></ul> 

Qualification &amp; Experience:
 
Identity &amp; Access Management: Administer IAM solutions including RBAC, PAM, MFA, and SSO; enforce least-privilege access principles across systems and applications 
 
<ul><li>Security Awareness &amp; Training: Conduct security awareness training and phishing simulation campaigns to promote a security-conscious culture across the organization</li></ul> 
<ul><li>Bachelor&rsquo;s degree in computer science, Cybersecurity, Information Technology, Computer Engineering, or a related technical field</li><li>At least one professional cybersecurity certification is required, such as CompTIA Security+, CEH (Certified Ethical Hacker), or equivalent
</li><li>Advanced certifications (CISSP, CISM, CISA, GIAC, or equivalent) are highly desirable
</li><li>NCA-aligned training or certifications are a significant advantage</li><li>Minimum 3 years of hands-on experience in cybersecurity engineering, information security, or a related IT security role
</li><li>Proven experience operating and managing security tools such as SIEM, firewalls, IDS/IPS, EDR, and WAF</li><li>Experience implementing security controls aligned with NCA ECC/CCC or equivalent frameworks (ISO 27001, NIST CSF)
</li><li>Exposure to cloud security concepts and securing workloads on major cloud platforms (AWS, Azure, GCP, or Alibaba Cloud</li></ul></div>

Cybersecurity Engineer

Siemens

<div></div><div>Siemens Mobility (SMO) is the world&rsquo;s leading provider of mobility solutions that enable the efficient, safe, and environmentally friendly transport of people and goods&mdash;helping to improve the quality of everyday life for millions worldwide.

Motivated by innovation, we develop intelligent solutions for the growing digitalization of the transport sector. Our offerings include rail vehicles, rail automation, road traffic management systems, rail electrification, and services.

In Saudi Arabia, Siemens Mobility is at the forefront of shaping the future of transportation by delivering cutting-edge rail and metro solutions in alignment with Vision 2030. Our advanced automation and signaling solutions are powering the Riyadh Metro, the longest driverless metro in the world, spanning a combined length of 176 kilometers, is set to revolutionize mobility in the capital by reducing road congestion and enhancing connectivity across the city.

Today, we are recruiting for a Junior Cybersecurity Engineer to join our team in Saudi Arabia. This is an excellent career opportunity for professionals looking to join a truly international team in one of the biggest projects of Siemens Mobility. 
 
What are my responsibilities?
<ul>
<li>Support implementation of project-specific cybersecurity requirements in line with Siemens and customer standards</li>
<li>Coordinate cybersecurity-related activities across engineering, testing, commissioning, and IT/OT teams</li>
<li>Act as a focal point for tracking cybersecurity actions, deliverables, and evidence required for audits and approvals</li>
<li>Support preparation, maintenance, and control of cybersecurity documentation</li>
<li>Ensure documentation quality, consistency, and version control across the project lifecycle</li>
<li>Maintain cybersecurity risk and issue registers under the guidance of senior cybersecurity staff</li>
<li>Track mitigation actions and follow up with responsible teams on closure</li>
<li>Support escalation of cybersecurity risks, deviations, or non-compliances when identified</li>
<li>Support engineering and system teams in applying cybersecurity requirements during design, configuration, testing, and handover</li>
<li>Assist with coordination of cybersecurity reviews, workshops, and technical discussions</li>
<li>Support cybersecurity inputs to FAT, SAT, site activities, and readiness reviews (as applicable)</li>
<li>Monitor progress of cybersecurity activities against agreed plans and milestones</li>
<li>Support preparation of regular cybersecurity status updates for project management and governance forums</li>
<li>Ensure timely follow-up on actions raised during audits, reviews, and assessments</li>
<li>Build familiarity with relevant standards and frameworks (e.g., IEC 62443, ISO 27001, rail/OT cybersecurity requirements)</li>
<li>Capture lessons learned and support continuous improvement of cybersecurity ways of working within the project team</li>
</ul>
What do I need to qualify for this job?
<ul>
<li>Bachelor&rsquo;s degree in Cybersecurity, Computer Engineering, Computer Science, Information Technology, or a related discipline</li>
<li>1&ndash;3 years of experience in cybersecurity, IT/OT systems, engineering projects, or infrastructure environments</li>
<li>Basic understanding of cybersecurity concepts (networks, access control, risk, vulnerabilities)</li>
<li>Interest in industrial / OT cybersecurity and critical infrastructure projects</li>
<li>Familiarity with cybersecurity standards (IEC 62443, ISO 27001, NIST &ndash; awareness level is sufficient)</li>
<li>Ability to work with structured documentation, trackers, and compliance matrices</li>
<li>Competent user of MS Office (Excel, Word, PowerPoint); exposure to security tools is a plus</li>
<li>Strong attention to detail and disciplined follow-through</li>
<li>Organized, proactive, and comfortable working in a regulated project environment</li>
<li>Good communication skills and ability to work with multicultural, cross-functional teams</li>
<li>Willingness to learn and grow under the guidance of senior cybersecurity professionals</li></ul> 
 
What else do I need to know?

As a world leader in developing and producing the most advanced technologies, we improve lives and further human achievements worldwide, while also protecting the climate - all thanks to our employees. Working with us, you have the foundation to develop personally and professionally. We give you the chance to do something significant, that benefits society and human progress. We give you the chance to create a difference.

At Siemens we are always challenging ourselves to build a better future. We need the most innovative and diverse Digital Minds to develop tomorrow &lsquo;s reality. Find out more about the Digital world of Siemens here: www.siemens.com/careers/digitalminds

Diversity at Siemens is our source of creativity and innovation. Having different types of talent and experiences makes us more ambitious and better prepared to respond successfully to the demands of the Society. Therefore, we value the candidates that reflect the Diversity that we enjoy in our Company. Please find more information at www.siemens.com</div>

Junior Cybersecurity Engineer (Saudi National) @Siemens Mobility KSA

DeepSource Technologies

<div><ul><li>Manage and support the deployment and configuration of Data Loss Prevention (DLP) solutions during the 6-month contract period in Riyadh, KSA.</li>
<li>Implement, monitor, and fine-tune DLP policies to prevent data leakage and maintain compliance with organizational and regulatory standards.</li>
<li>Collaborate with IT security teams to identify data protection requirements and address security incidents promptly.</li>
<li>Analyze security alerts and perform root cause analysis to mitigate risks related to data breaches.</li>
<li>Provide technical expertise and guidance on best practices for data security, ensuring secure handling of sensitive information.</li>
<li>Document procedures and assist in knowledge transfer to internal teams at contract completion.</li>
<li>Maintain up-to-date knowledge of data protection regulations applicable in Riyadh, KSA and globally.</li> 
</ul> 
 
Requirements 
<ul>
<li>Minimum 3 years of experience in DLP engineering, preferably with hands-on experience in implementation and support.</li>
<li>Proficient with Forcepoint, Symantec, or other major DLP solutions.</li>
<li>Strong understanding of data security principles, including data classification, encryption, and insider threat mitigation.</li>
<li>Familiarity with compliance standards relevant to the region, such as SAMA guidelines, GDPR, or ISO 27001.</li>
<li>Experience working in contractual or project-based roles and delivering results within tight timelines.</li>
<li>Excellent communication skills to liaise with stakeholders across technical and non-technical teams.</li>
<li>Ability to work on-site in Riyadh, KSA for the duration of the contract.</li>
<li>Bachelor&rsquo;s degree in Computer Science, Cybersecurity, or related field is preferred.</li> 
</ul> 
 
Benefits 
<ul><li>
Medical insurance including family.</li><li>
Flight tickets including family.</li></ul></div>

Cybersecurity Engineer - DLP - 6 Months Contract - Riyadh,KSA

<div>Job Overview
Responsible for designing, implementing, and managing Privileged Access Management (PAM) solutions to secure, monitor, and control privileged accounts and sessions across the organization. The role ensures least-privilege enforcement, credential lifecycle management, secure access to critical systems, and alignment with regulatory and organizational security frameworks.
Key Responsibilities<ul><li>
Design, deploy, and maintain PAM architectures and components (vaults, session brokers, credential rotation, connectors)</li><li>
Administer and configure enterprise PAM platforms (e.g., CyberArk, Beyond Trust, Thycotic, or equivalent)</li><li>
Implement and enforce least-privilege access models, role-based access controls (RBAC), and just-in-time (JIT) access workflows</li><li>
Manage privileged credential lifecycle: onboarding, rotation, vaulting, and decommissioning</li><li>
Monitor privileged sessions, capture recordings, and perform periodic reviews and audits of privileged activity</li><li>
Integrate PAM with identity providers, SIEM, ITSM, and endpoint solutions to enable centralized logging, alerting, and incident response</li><li>
Develop and maintain ITPs, runbooks, standard operating procedures, and implementation/migration plans for PAM-related activities</li><li>
Conduct vulnerability assessments, perform risk analysis for privileged access, and recommend compensating controls</li><li>
Support security compliance and audit requests by providing evidence, reports, and remediation activities aligned with NCA ECC/CCC, PDPL, or equivalent frameworks</li><li>
Provide technical guidance, training, and knowledge transfer to operations, SOC, and application teams on PAM best practices</li><li>
Investigate privileged access incidents and collaborate with incident response to contain and remediate breaches involving privileged credentials</li></ul>
Required Skills and Qualifications<ul><li>
Bachelor&rsquo;s degree in Computer Science, Cybersecurity, Information Technology, Computer Engineering, or a related field</li><li>
Minimum 4-8 years of hands-on experience implementing or administrating PAM or related privileged account controls</li><li>
Hands-on experience with commercial PAM products (CyberArk, BeyondTrust, Thycotic/Delinea, Centrify) or open-source equivalents</li><li>
Strong understanding of identity and access management concepts including RBAC, MFA, SSO, JIT, and delegation patterns</li><li>
Experience integrating PAM with Active Directory/LDAP, SSO providers, SIEM, ITSM, and orchestration tools</li><li>
Familiarity with logging, monitoring, and analytics for privileged sessions; ability to produce audit-ready reports</li><li>
Knowledge of relevant regulatory frameworks and standards (NCA ECC/CCC, PDPL, ISO 27001, NIST) and ability to map PAM controls to compliance requirements</li><li>
Strong scripting and automation skills (PowerShell, Python, REST APIs) to support integrations and operational tasks</li><li>
Excellent documentation, communication, and stakeholder coordination skills</li><li>
Professional certifications such as CyberArk Trustee/Administrator, CISSP, CISM, or equivalent are desirable</li></ul>
Additional Skills :
<ul><li>1. Hands-on experience with BeyondTrust PAM
2. Strong knowledge of Active Directory &amp; Identity Management
3. Experience with SIEM integration
4. Knowledge of Privileged Access Management concepts
5. Troubleshooting &amp; incident handling
6. Experience with APIs and system integrations
7. Understanding of security policies &amp; compliance
8. Ability to manage servers and user access securely</li></ul>
Preferred Qualifications<ul><li>
Experience working within energy, utilities, or critical infrastructure environments and familiarity with OT/ICS considerations</li><li>
Familiarity with cloud PAM concepts and SaaS/Cloud connector implementations on AWS, Azure, or GCP</li><li>
Experience supporting large-scale PAM rollouts, migrations, and change management activities</li></ul>
Behavioral Competencies<ul><li>
Collaborative and customer-focused with the ability to work across technical and non-technical teams</li><li>
Analytical thinker with strong problem-solving and troubleshooting capabilities</li><li>
Detail-oriented, organized, and committed to maintaining high-quality documentation</li><li>
Ability to manage multiple priorities and work effectively in fast-paced environments</li></ul>
Location &amp; Reporting
Position reports to the Information Security Manager and will collaborate closely with IT operations, SOC, identity teams, and business application owners. Location and onsite expectations will be specified during the hiring process.</div>

PAM Engineering

Explore 976+ Information security engineer in Riyadh this April. Find roles across top companies and apply now to boost your career.