project engineer

sales engineer

civil engineer

application support engineer Jobs in Riyadh

application support engineer

architect engineer

information security engineer

Tabby

<div><h3 class="jobSectionHeader">Description</h3><div> 
Tabby creates financial freedom in the way people shop, earn and save by reshaping their relationship with money. Over 15 million users choose Tabby to stay in control of their spending and make the most out of their money.</div><div>
 
The company&rsquo;s flagship offering allows shoppers to split their payments online and in-store with no interest or fees. Over 40,000 global brands and small businesses, including Amazon, Noon, IKEA, and SHEIN use Tabby to accelerate growth and gain loyal customers by offering easy and flexible payments online and in stores. 
</div><div>Tabby generates over $10 billion in annual transaction volume for its partner brands and is the highest-rated, most-reviewed, largest, and fastest-growing FinTech in the GCC region. 
</div><div>Tabby launched in 2019 and has since raised +$1 billion in equity and debt funding from global and regional investors, and is now valued at $4.5 billion.</div><div>
 
We are thrilled to announce an opportunity for a skilled Information Security Engineer to join our team and play a role in enhancing our security measures by utilizing your abilities and deep knowledge of information security methodologies. Paying attention to details and efficiently solving problems will be crucial in ensuring the safety of Tabby&rsquo;s systems. 
 
The role you will be involved in both operations and important implementation projects contributing to the growth and maintenance of our technology infrastructure. If you have a passion for cybersecurity, possess technical skills and aspire to make a significant impact we strongly encourage you to apply and become an essential part of our dedicated cybersecurity team.</div><h3 class="jobSectionHeader"> 
Key Responsibilities</h3> 
<ul>
<li>
Penetration Testing: Perform Dynamic Application Security Testing (DAST) and Static Application Security Testing (SAST) for Web, Mobile, and API applications. Plan and conduct Infrastructure Vulnerability Assessment and Penetration Testing of systems, switches, servers, and more.</li>
<li>Adversary Simulation (Red Teaming): Participate in sophisticated Red Team</li>
<li>engagements, emulating real-world threat actor Tactics, Techniques, and Procedures (TTPs) to assess the detection and response capabilities of the Blue Team/SOC.</li>
<li>Vulnerability &amp; Application Security Analysis: Conduct both Dynamic (DAST) and Static (SAST) Application Security Testing, and perform systematic vulnerability assessments using automated tools combined with meticulous manual verification.</li>
<li>Report Development: Produce actionable, high-quality assessment reports that clearly articulate technical findings, business risk, and remediation strategies for both technical implementers and non-technical executives.</li>
<li>Control Evasion &amp; Social Engineering: Conduct controlled offensive testing, including Breach &amp; Attack Simulations (BAS) and targeted phishing campaigns, to assess the resilience and bypassability of technical and human controls.</li>
<li>Tool Development &amp; Reporting: Develop and maintain custom scripts and tools to enhance offensive security capabilities, and produce high-quality, actionable reports detailing discovered threats and validated vulnerabilities on an ongoing basis.</li>
<li>Security Awareness: Experience in conducting phishing simulations and other</li>
<li>awareness exercises to evaluate employee susceptibility to social engineering attacks and provide targeted training to enhance resilience.</li></ul><div></div><h3 class="jobSectionHeader"> 
Skills, Knowledge &amp; Expertise</h3> 
<ul>
<li>
Degree in Information Technology, Computer Science, Software Engineering, or related field</li>
<li>Knowledge of Information Technology security issues and approaches to manage</li>
<li>Information Technology security with a fast paced Fintech environment.</li>
<li>Security Qualification Good to have: Offensive Security Certified Professional (OSCP), GIAC Penetration Tester (GPEN), GIAC Web Application Penetration Tester (GWAPT), CREST Registered Penetration Tester (CRT) or equivalent.</li>
<li>Excellent communication, influencing and stakeholder management skills</li>
<li>2-3 Experience of working across teams to deliver solutions and generate high levels of internal buy-in</li>
<li>Experience of working in a culturally diverse environment</li>
<li>Knowledge of online technologies, payment methods, content delivery networks, REST APIs, microservices, and application development.</li>
<li>Programming and scripting understanding (Bash, Python etc.)</li></ul><div></div><h3 class="jobSectionHeader"> 
About Tabby</h3><div>
Tabby creates financial freedom in the way people shop, earn and save, by reshaping their relationship with money. 
 
The company&rsquo;s flagship offering allows shoppers to split their payments online and in-store with no interest or fees. Over 32,000 global brands and small businesses, including Amazon, Noon, IKEA and Shein use Tabby to accelerate growth and gain loyal customers by offering easy and flexible payments online and in stores. 
 
Tabby has generated over $7 billion in transaction volume for its partner brands and has the highest rated, most reviewed, largest and fastest growing app of any fintech in the GCC region. 
 
Tabby launched operations in 2020 and has raised +$1 billion in equity and debt funding from global and regional investors.</div></div>

Information Security Engineer - VAPT (Saudi National)

Naba Enterprises

Please note that only Saudi Nationals are eligible for this position. Arabic candidates from other nationalities will not be considered.Key Responsibilities:Conduct penetration testing and advanced security assessments. Ensure compliance with cybersecurity regulations such as NCA. Protect systems, applications, and data from cyber threats. Ensure confidentiality, integrity, and availability (CIA) of organizational data. Secure web applications and infrastructure against vulnerabilities. Monitor and respond to security incidents and risks. Collaborate with teams to improve overall security posture.Qualifications &amp; Requirements: Bachelor&rsquo;s degree in computer science or related field. Minimum 7+ years of experience in cybersecurity. eJPT and CCNA certifications are required. Experience in penetration testing and security assessments. Strong knowledge of cybersecurity frameworks, risk management, and compliance. Industry certifications such as CISSP, CISA, or CEH are preferred.Key Skills: Penetration Testing, Cybersecurity Compliance (NCA), Risk Management Threat Analysis &amp; Incident Response, Security Architecture.Pay: ﷼24,000.00 - ﷼27,000.00 per monthEducation:<ul><li>Bachelor's (Preferred)</li></ul>Experience:<ul><li>cybersecurity &amp; penetration testing and security assessments: 7 years (Preferred)</li></ul>License/Certification:<ul><li>eJPT and CCNA certifications are required. (Preferred)</li></ul>Work Location: In person

Information Security Engineer L3 ( Saudi National)

Muller's Solutions

<div>As a Senior Email Security Engineer at M&uuml;ller's Solutions, you will be responsible for designing, implementing, and managing email security solutions to protect the organization's email systems from cyber threats such as phishing, spam, malware, and data leakage. You will lead initiatives to strengthen email security posture, conduct threat analysis, and collaborate with IT teams to ensure secure and reliable email communication. 
Key Responsibilities:<ul><li>
Own enterprise email security gateways in production environments</li><li>
Design, tune, and operate:</li><li>
Anti‑phishing, anti‑spoofing, and malware controls</li><li>
Secure mail routing, TLS enforcement, and quarantine workflows</li><li>
Lead incident response for email‑borne threats (BEC, malware, zero‑day phishing)</li><li>
Integrate email security with M365 Defender / SIEM / SOAR / DLP</li><li>
Produce audit‑ready evidence aligned to SAMA / NCA frameworks</li><li>
Mentor L1/L2 analysts and document operational runbooks</li></ul><ul><li>
Design, deploy, and maintain email security solutions including anti-phishing, anti-spam, email encryption, and data loss prevention technologies.</li><li>
Monitor and analyze email security incidents, respond to threats, and conduct investigations to mitigate risk.</li><li>
Implement and manage email security protocols such as SPF, DKIM, DMARC to enhance email authentication and trustworthiness.</li><li>
Collaborate with other IT and security teams to integrate email security with overall cybersecurity strategy.</li><li>
Develop and enforce email security policies, procedures, and best practices.</li><li>
Conduct regular security assessments and vulnerability testing on email systems.</li><li>
Stay current on emerging email threats and advanced attack techniques to proactively recommend improvements.</li><li>
Provide training and awareness sessions regarding email security to employees and stakeholders.</li></ul> 

Requirements 
Requirements:<ul><li>
Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related field.</li><li>
FireEye EX / Trellix Email SecurityCisco Secure Email Gateway (ESA / IronPort)Trend Micro ScanMailProofpoint or Mimecast</li><li>
Microsoft Defender for Office 365 &amp; EOP</li><li>
Exchange Online mail flow &amp; hybrid email routing</li><li>
DMARC, DKIM, SPF enforcement &amp; troubleshooting</li><li>
Email threat hunting &amp; forensic analysis5+ years of experience in email security or related cybersecurity roles.</li><li>
Strong knowledge of email security technologies such as Microsoft Defender for Office 365, Proofpoint, Mimecast, or similar platforms.</li><li>
Proficiency in implementing and managing SPF, DKIM, and DMARC protocols.</li><li>
Experience with email encryption standards and data loss prevention (DLP) solutions.</li><li>
Demonstrated ability to analyze and respond to email-based threats such as phishing and malware.</li><li>
Familiarity with incident response procedures and security information and event management (SIEM) tools.</li><li>
Excellent problem-solving skills with strong attention to detail.</li><li>
Strong communication skills to educate and collaborate with technical and non-technical teams.</li></ul>
Preferred Qualifications:<ul><li>
Relevant certifications such as Certified Email Security Specialist (CESS), CISSP, or CISM.</li><li>
Experience with scripting and automation for email security processes.</li><li>
Knowledge of compliance standards related to email security and data privacy (e.g., GDPR, HIPAA).</li><li>
Experience in a managed security service provider (MSSP) environment is a plus.</li><li>
Strong advantage</li><li><ul><li>
Experience in regulated Saudi environments</li><li>
Evidence‑driven operations (audits, compliance, KPIs)</li><li>
Incident leadership during phishing or BEC events</li></ul></li></ul> 

Benefits 
Why Join Us:
Opportunity to work with a talented and passionate team.
Competitive salary and benefits package.
Exciting projects and innovative work environment.</div>

Senior Email Security Engineer - 3 Month

CyberKnight

<div>
 
 We are looking to hire an Associate Cybersecurity Engineer to join our growing team in Riyadh. If you are passionate about cyber security and eager to build a strong career in the cyber security domain, we want to hear from you.
 
 
 
 
 
 
 Key Responsibilities:
 
 
 
 - Conduct presentations, demonstrations and proof of concepts of cybersecurity solutions.
 
 
 - Assist in implementation, deployment, administration, configuration and support of cybersecurity solutions.
 
 
 - Responding to RFPs and preparing technical documentation.
 
 
 
 
 
 
 Requirements:
 
 
 
 -
 
 
 Important
 
 
 : Valid Saudi Council of Engineers membership (Must have an active membership in the Saudi Council of Engineers,
 
 please attach your Saudi Council of Engineers Certificate along with your CV/Resume
 
 )
 
 
 - Experience: 0&ndash;2 years (Fresh Graduates are welcome to apply)
 
 
 - Ability to communicate effectively in both English and Arabic (fluency in both languages is a plus, but not required).
 
 
 - Graduated with an Engineering degree or similar qualifications (e.g., Cybersecurity, Computer Science, Software Engineering, IT, etc.).
 
 
 - Solid knowledge of the basics/fundamentals of Network, Operating Systems &amp; Cybersecurity
 
 
 - Good analytical, problem-solving, and communication skills
 
 
 - Ability to work collaboratively within a technical team
 
 
 
</div>

Associate Cybersecurity Engineer (Saudi National)

DeepSource Technologies

<div>We are seeking an experienced Senior API Security Engineer to join our team on-site. The ideal candidate will have strong expertise in API gateway security, network security solutions, and SIEM integration, with a proven ability to protect enterprise environments against evolving cyber threats.
Key Responsibilities<ul><li>
Design, implement, and manage API security solutions across enterprise environments
</li><li>Configure and maintain API Gateways (e.g., F5, Kong, IBM DataPower)
</li><li>Implement and manage IDS/IPS systems for threat detection and prevention
</li><li>Integrate security solutions with SIEM platforms for monitoring and incident response
</li><li>Develop and enforce API security policies, including rate limiting, authentication, and threat protection
</li><li>Secure APIs by identifying and blocking malicious patterns and automated bot attacks
</li><li>Perform security assessments, vulnerability analysis, and risk mitigation
</li><li>Collaborate with cross-functional teams to ensure secure application delivery</li></ul> 

Requirements 
Minimum 5+ years of experience in API security and network security
Hands-on experience with:
<ul><li>F5 / Kong / IBM DataPower API Gateways
</li><li>IDS/IPS solutions
</li><li>SIEM integration
</li></ul>Strong understanding of:
<ul><li>API security best practices
</li><li>Network security architecture
</li><li>Threat detection and mitigation techniques
</li></ul>Experience in securing APIs against common attack vectors (OWASP, bot attacks, etc.)
Relevant security certifications are mandatory:
<ul><li>CISSP
</li><li>GICSP
</li><li>Or equivalent</li></ul></div>

Senior API Security Engineer - Riyadh, KSA

Prime Gate

<div>Job summary
 
 
Responsible for designing, implementing, and maintaining the organization&rsquo;s cybersecurity infrastructure and controls to protect information assets, systems, and networks from cyber threats. This role delivers proactive threat detection, incident response, vulnerability management, and security compliance aligned with NCA ECC/CCC frameworks and Saudi regulatory requirements, ensuring a resilient and secure operational environment. 
 
Key responsibility : 
<ul><li>Security Infrastructure Management: Deploy, configure, and maintain security solutions including firewalls, IDS/IPS, SIEM, WAF, EDR, DLP, and endpoint protection platforms to safeguard organizational assets
</li><li>Threat Monitoring &amp; Incident Response: Continuously monitor security events and alerts; investigate and respond to security incidents following documented incident response procedures; perform root cause analysis and implement corrective actions</li><li>Vulnerability Management: Conduct regular vulnerability assessments and penetration tests on systems, networks, and applications; prioritize and track remediation activities to minimize organizational risk
</li><li>Security Policy &amp; Compliance: Develop, maintain, and enforce security policies, standards, and procedures; ensure alignment with NCA ECC, CCC, OTCC, PDPL, and other applicable regulatory frameworks
</li><li>Cloud Security: Implement and monitor cloud security controls including CSPM, CWPP, and identity management across cloud platforms; ensure cloud workloads meet security baseline requirements</li></ul> 

Qualification &amp; Experience:
 
Identity &amp; Access Management: Administer IAM solutions including RBAC, PAM, MFA, and SSO; enforce least-privilege access principles across systems and applications 
 
<ul><li>Security Awareness &amp; Training: Conduct security awareness training and phishing simulation campaigns to promote a security-conscious culture across the organization</li></ul> 
<ul><li>Bachelor&rsquo;s degree in computer science, Cybersecurity, Information Technology, Computer Engineering, or a related technical field</li><li>At least one professional cybersecurity certification is required, such as CompTIA Security+, CEH (Certified Ethical Hacker), or equivalent
</li><li>Advanced certifications (CISSP, CISM, CISA, GIAC, or equivalent) are highly desirable
</li><li>NCA-aligned training or certifications are a significant advantage</li><li>Minimum 3 years of hands-on experience in cybersecurity engineering, information security, or a related IT security role
</li><li>Proven experience operating and managing security tools such as SIEM, firewalls, IDS/IPS, EDR, and WAF</li><li>Experience implementing security controls aligned with NCA ECC/CCC or equivalent frameworks (ISO 27001, NIST CSF)
</li><li>Exposure to cloud security concepts and securing workloads on major cloud platforms (AWS, Azure, GCP, or Alibaba Cloud</li></ul></div>

Cybersecurity Engineer

Siemens

<div></div><div>Siemens Mobility (SMO) is the world&rsquo;s leading provider of mobility solutions that enable the efficient, safe, and environmentally friendly transport of people and goods&mdash;helping to improve the quality of everyday life for millions worldwide.

Motivated by innovation, we develop intelligent solutions for the growing digitalization of the transport sector. Our offerings include rail vehicles, rail automation, road traffic management systems, rail electrification, and services.

In Saudi Arabia, Siemens Mobility is at the forefront of shaping the future of transportation by delivering cutting-edge rail and metro solutions in alignment with Vision 2030. Our advanced automation and signaling solutions are powering the Riyadh Metro, the longest driverless metro in the world, spanning a combined length of 176 kilometers, is set to revolutionize mobility in the capital by reducing road congestion and enhancing connectivity across the city.

Today, we are recruiting for a Junior Cybersecurity Engineer to join our team in Saudi Arabia. This is an excellent career opportunity for professionals looking to join a truly international team in one of the biggest projects of Siemens Mobility. 
 
What are my responsibilities?
<ul>
<li>Support implementation of project-specific cybersecurity requirements in line with Siemens and customer standards</li>
<li>Coordinate cybersecurity-related activities across engineering, testing, commissioning, and IT/OT teams</li>
<li>Act as a focal point for tracking cybersecurity actions, deliverables, and evidence required for audits and approvals</li>
<li>Support preparation, maintenance, and control of cybersecurity documentation</li>
<li>Ensure documentation quality, consistency, and version control across the project lifecycle</li>
<li>Maintain cybersecurity risk and issue registers under the guidance of senior cybersecurity staff</li>
<li>Track mitigation actions and follow up with responsible teams on closure</li>
<li>Support escalation of cybersecurity risks, deviations, or non-compliances when identified</li>
<li>Support engineering and system teams in applying cybersecurity requirements during design, configuration, testing, and handover</li>
<li>Assist with coordination of cybersecurity reviews, workshops, and technical discussions</li>
<li>Support cybersecurity inputs to FAT, SAT, site activities, and readiness reviews (as applicable)</li>
<li>Monitor progress of cybersecurity activities against agreed plans and milestones</li>
<li>Support preparation of regular cybersecurity status updates for project management and governance forums</li>
<li>Ensure timely follow-up on actions raised during audits, reviews, and assessments</li>
<li>Build familiarity with relevant standards and frameworks (e.g., IEC 62443, ISO 27001, rail/OT cybersecurity requirements)</li>
<li>Capture lessons learned and support continuous improvement of cybersecurity ways of working within the project team</li>
</ul>
What do I need to qualify for this job?
<ul>
<li>Bachelor&rsquo;s degree in Cybersecurity, Computer Engineering, Computer Science, Information Technology, or a related discipline</li>
<li>1&ndash;3 years of experience in cybersecurity, IT/OT systems, engineering projects, or infrastructure environments</li>
<li>Basic understanding of cybersecurity concepts (networks, access control, risk, vulnerabilities)</li>
<li>Interest in industrial / OT cybersecurity and critical infrastructure projects</li>
<li>Familiarity with cybersecurity standards (IEC 62443, ISO 27001, NIST &ndash; awareness level is sufficient)</li>
<li>Ability to work with structured documentation, trackers, and compliance matrices</li>
<li>Competent user of MS Office (Excel, Word, PowerPoint); exposure to security tools is a plus</li>
<li>Strong attention to detail and disciplined follow-through</li>
<li>Organized, proactive, and comfortable working in a regulated project environment</li>
<li>Good communication skills and ability to work with multicultural, cross-functional teams</li>
<li>Willingness to learn and grow under the guidance of senior cybersecurity professionals</li></ul> 
 
What else do I need to know?

As a world leader in developing and producing the most advanced technologies, we improve lives and further human achievements worldwide, while also protecting the climate - all thanks to our employees. Working with us, you have the foundation to develop personally and professionally. We give you the chance to do something significant, that benefits society and human progress. We give you the chance to create a difference.

At Siemens we are always challenging ourselves to build a better future. We need the most innovative and diverse Digital Minds to develop tomorrow &lsquo;s reality. Find out more about the Digital world of Siemens here: www.siemens.com/careers/digitalminds

Diversity at Siemens is our source of creativity and innovation. Having different types of talent and experiences makes us more ambitious and better prepared to respond successfully to the demands of the Society. Therefore, we value the candidates that reflect the Diversity that we enjoy in our Company. Please find more information at www.siemens.com</div>

Junior Cybersecurity Engineer (Saudi National) @Siemens Mobility KSA

Explore 1081+ Information security engineer in Riyadh this May. Find roles across top companies and apply now to boost your career.