consultant

ksa security mgr

network engineer

presales consultant

principal consultant – soc transformation and xsiam deployment Jobs in Riyadh

principal consultant – soc transformation and xsiam deployment

offensive cybersecurity consultant

Help AG, an e& enterprise company

<div>
 Help AG is looking for a talented and experienced Offensive Cybersecurity Consultant who will be involved in the opportunity to engage in a wide range of activities related to vulnerability assessment and penetration testing. Here are the key areas they will be involved in:
 
 
 <ul>
 <li>
 Vulnerability assessment and penetration testing services for web applications.
 </li>
 <li>
 Web application audits.
 </li>
 <li>
 Mobile application penetration testing (iOS &amp; Android).
 </li>
 <li>
 Source code review and software assurance maturity audits.
 </li>
 <li>
 Red teaming and infrastructure security assessment.
 </li>
 <li>
 Ability to perform internal and external penetration testing.
 </li>
 <li>
 Vulnerability research.
 
 
 
 </li>
 </ul>
 
 Responsibilities:
 
 
 
 <ul>
 <li>
 Perform the vulnerability assessment and penetration testing as per Help AG&rsquo;s methodology and scope of the assigned project.
 </li>
 <li>
 Populate the VA and PT knowledge base with new learned techniques, attacks or other zero day findings.
 </li>
 <li>
 Update the Help AG penetration testing guideline by documenting the newly added attacks and procedures to the methodology.
 </li>
 <li>
 Attend technical customer meetings.
 </li>
 <li>
 Research new threats.
 </li>
 <li>
 Perform security assessments independently
 
 
 
 </li>
 </ul>
 
 Qualifications &amp; Skills:
 
 
 
 <ul>
 <li>
 Bachelor or MSc in Computer Science or relevant degree.
 </li>
 <li>
 0 - 3 years of experience as a penetration tester.
 </li>
 <li>
 Knowledge in web-based programming
 </li>
 <li>
 Technical writing (including articles, demonstrations, reports and technical blogs)
 </li>
 <li>
 OSCP or OSCE certified.
 </li>
 <li>
 SANS certifications are optional.
 </li>
 <li>
 Good vision, creativity and problem-solving skills.
 </li>
 <li>
 Software development: the language is not important; we look for the ability to quickly adapt to any language as needed as per the required responsibilities.
 </li>
 <li>
 Good presentation skills.
 </li>
 <li>
 Fast learner.
 </li>
 <li>
 Self-motivation and eagerness to learn.
 </li>
 <li>
 Team player.
 
 
 
 </li>
 </ul>
 
 Benefits:
 
 
 
 <ul>
 <li>
 Health insurance with one of the leading global providers for medical insurance.
 </li>
 <li>
 Career progression and growth through challenging projects and work.
 </li>
 <li>
 Employee engagement and wellness campaigns activities throughout the year.
 </li>
 <li>
 Tailored training &amp; development program.
 
 
 
 </li>
 </ul>
 
 About Us:
 
 
 
 Help AG is the cybersecurity arm of e&amp; enterprise and provides leading enterprise businesses across the Middle East with strategic consultancy combined with tailored information security solutions and services that address their diverse requirements, enabling them to evolve securely with a competitive edge.
 
 
 Present in the Middle East since 2004, Help AG was strategically acquired by e&amp; in2020, hence creating a cybersecurity and digital transformation powerhouse in the region.
 
 
 Help AG has firmly established itself as the region's trusted IT security advisor by remaining vendor agnostic, trustworthy, independent, and maintaining its focus on all aspects of cybersecurity.
 
 
 With best of breed technologies from industry-leading vendor partners, expertly qualified service delivery teams and a state-of-the-art consulting practice, Help AG delivers unmatched value to its customers by strengthening their cyber defenses and safeguarding their business
</div>

Offensive Cybersecurity Consultant

help AG

<div>Help AG is looking for a talented and experienced Offensive Cybersecurity Consultant who will be involved in the opportunity to engage in a wide range of activities related to vulnerability assessment and penetration testing. Here are the key areas they will be involved in:<ul><li>
Vulnerability assessment and penetration testing services for web applications.</li><li>
Web application audits.</li><li>
Mobile application penetration testing (iOS &amp; Android).</li><li>
Source code review and software assurance maturity audits.</li><li>
Red teaming and infrastructure security assessment.</li><li>
Ability to perform internal and external penetration testing.</li><li>
Vulnerability research.</li></ul> 
Responsibilities:<ul><li> 
Perform the vulnerability assessment and penetration testing as per Help AG&rsquo;s methodology and scope of the assigned project.</li><li>
Populate the VA and PT knowledge base with new learned techniques, attacks or other zero day findings.</li><li>
Update the Help AG penetration testing guideline by documenting the newly added attacks and procedures to the methodology.</li><li>
Attend technical customer meetings.</li><li>
Research new threats.</li><li>
Perform security assessments independently</li></ul> 
Qualifications &amp; Skills:<ul><li> 
Bachelor or MSc in Computer Science or relevant degree.</li><li>
0 - 3 years of experience as a penetration tester.</li><li>
Knowledge in web-based programming</li><li>
Technical writing (including articles, demonstrations, reports and technical blogs)</li><li>
OSCP or OSCE certified.</li><li>
SANS certifications are optional.</li><li>
Good vision, creativity and problem-solving skills.</li><li>
Software development: the language is not important; we look for the ability to quickly adapt to any language as needed as per the required responsibilities.</li><li>
Good presentation skills.</li><li>
Fast learner.</li><li>
Self-motivation and eagerness to learn.</li><li>
Team player.</li></ul> 
Benefits:<ul><li> 
Health insurance with one of the leading global providers for medical insurance.</li><li>
Career progression and growth through challenging projects and work.</li><li>
Employee engagement and wellness campaigns activities throughout the year.</li><li>
Tailored training &amp; development program.</li></ul> 
About Us:
Help AG is the cybersecurity arm of e&amp; enterprise and provides leading enterprise businesses across the Middle East with strategic consultancy combined with tailored information security solutions and services that address their diverse requirements, enabling them to evolve securely with a competitive edge. 
Present in the Middle East since 2004, Help AG was strategically acquired by e&amp; in2020, hence creating a cybersecurity and digital transformation powerhouse in the region.
Help AG has firmly established itself as the region's trusted IT security advisor by remaining vendor agnostic, trustworthy, independent, and maintaining its focus on all aspects of cybersecurity.
With best of breed technologies from industry-leading vendor partners, expertly qualified service delivery teams and a state-of-the-art consulting practice, Help AG delivers unmatched value to its customers by strengthening their cyber defenses and safeguarding their business</div>

Soar Software Development Company

<div>About us:
Soar is a global fintech startup that specializes in financing and investment. Currently headquartered in Saudi Arabia, Soar is growing throughout the region with a mission to help people achieve their financial goals with innovative financial and property investment solutions and tools through its multi-purpose platform, designed to offer a simple and seamless user experience.
Role Summary:
You will be the architect of our &quot;Security by Design&quot; philosophy. Your primary mandate is to embed security into every stage of our software development lifecycle&mdash;from the first line of code to production deployment. You will leverage AI-driven tools to automate threat detection and vulnerability management, ensuring that our speed of innovation is matched by our speed of defense.
Key Responsibilities:
1. Secure Software Development Life Cycle (SSDLC)
Shift Left Security: Champion the integration of security early in the development phase. Lead Threat Modeling sessions during the design phase of new features to identify risks before code is written. CI/CD Pipeline Security: Automate security gates within our deployment pipelines. Implement and manage SAST (Static Application Security Testing), DAST (Dynamic Application Security Testing), and SCA (Software Composition Analysis) tools. Secure Coding Standards: Establish and enforce secure coding guidelines (OWASP Top 10, SANS 25) for our engineering team. Conduct regular code reviews and security training for developers.
2. AI &amp; Automation Integration
AI-Enhanced AppSec: Utilize AI-powered code analysis tools to reduce false positives in vulnerability scanning and provide auto-remediation suggestions to developers. Automated SOAR: Build and maintain a Security Orchestration, Automation, and Response (SOAR) framework. Create playbooks that automatically isolate compromised assets or block malicious IPs without human intervention. Predictive Defense: Deploy AI-driven network monitoring to detect behavioral anomalies in our self-hosted infrastructure (e.g., zero-day attacks or lateral movement) that traditional rules might miss.
3. Infrastructure &amp; Network Security (Self-Hosted)
Hardening: Oversee the security hardening of our self-hosted environments (Kubernetes clusters, Docker containers, and Linux servers). Traffic Analysis: Manage WAF (Web Application Firewall) rules and DDoS protection layers, ensuring high availability for our customers. Secrets Management: Enforce strict secrets management (e.g., Vault) to ensure no credentials are hardcoded in the application.
4. GRC (Governance, Risk &amp; Compliance)
Regulatory Adherence: Ensure our SSDLC and operations strictly adhere to SAMA&rsquo;s Cybersecurity Framework and NCA&rsquo;s Essential Cybersecurity Controls (ECC). Audit Readiness: Automate evidence collection for compliance audits to minimize manual overhead. Data Residency: Ensure all AI processing and data storage complies with the Personal Data Protection Law (PDPL), keeping critical data within KSA.
Qualifications
Education &amp; Experience:
Experience: 6+ years in Cybersecurity, with specific experience in Application Security or DevSecOps.
Managerial: Proven ability to lead technical initiatives and influence engineering teams.
Tech Stack: Deep experience with CI/CD tools (Jenkins, GitLab, GitHub Actions), Container Security (Kubernetes/Docker), and Python/Go scripting.
Technical Skills:
SSDLC Mastery: Expert knowledge of integrating security tools (SonarQube, Checkmarx, Burp Suite, etc.) into a pipeline.
AI/Automation: Experience implementing AI-based security tools (e.g., Darktrace, Vectra, or AI-enabled SIEMs) and writing automation scripts.
Regulatory Knowledge: Strong understanding of SAMA regulations regarding application security and data protection.
Nice to have skills (Certifications):
CSSLP (Certified Secure Software Lifecycle Professional) - Highly Preferred
CISSP (Certified Information Systems Security Professional)
OSCP (Offensive Security Certified Professional)</div>

Director of Cybersecurity

Cybersecurity Consultant

EjadTech - إيجاد التقنية

<div>
 
 🔍 We're Hiring: Risk Management Consultant &amp; Business Continuity Consultant
 
 
 📍 Location: Remote| 💼 Employment Type: Full-Time
 
 
 🧭 Experience Required: 8+Years
 
 
 🎓 Preferred Certifications: CBCP, ISO 22301 Lead Implementer, CRMP
 
 
 
 
 
 Are you passionate about safeguarding critical operations and building resilient organizations? The Business Continuity &amp; Risk Management Consultant is responsible for developing and implementing strategies to ensure the continuity of critical operations and minimize operational risks in compliance with Digital Government Authority (DGA) standards and global frameworks such as ISO 22301. The role includes conducting risk assessments, designing emergency response plans, and ensuring regulatory compliance to enhance business resilience and sustainability.
 
 
 
 
 
 🛡️ Key Responsibilities:
 
 
 Develop and implement Business Continuity (BCP) and Disaster Recovery (DR) plans per DGA &amp; ISO 22301
 
 
 Conduct Business Impact Analysis (BIA) to identify mission-critical operations
 
 
 Design crisis response strategies to mitigate operational and financial risks
 
 
 Maintain and update business continuity &amp; risk frameworks based on current regulations
 
 
 Act as a strategic advisor to departments on resilience and risk readiness
 
 
 Lead crisis simulation exercises to validate organizational preparedness
 
 
 Train internal teams on risk management best practices and digital governance
 
 
 Ensure full compliance with DGA regulations and cybersecurity standards
 
 
 Analyze operational, financial, and technological risks and develop response plans
 
 
 Report on risk assessments and business continuity readiness to senior management
 
 
 
 
 
 ✅ Qualifications &amp; Requirements:
 
 
 Bachelor's degree in IT, Business Administration, Cybersecurity, or a related field
 
 
 8+ years of proven experience in business continuity and risk management
 
 
 Deep knowledge of DGA regulations, ISO standards, and BCM compliance frameworks
 
 
 Certifications such as CBCP, ISO 22301 Lead Implementer, or CRMP are preferred
 
 
 Experience in conducting BIA and risk assessments in complex environments
 
 
 Strong analytical and strategic decision-making abilities
 
 
 Ability to remain composed and lead under pressure
 
 
 Excellent communication, consulting, and training delivery skills
 
</div>

Risk Management Consultant & Business Continuity Consultant

Boston Consulting Group

<div>Who We Are
Platinion Profile: 
Join BCG Platinion&rsquo;s Riyadh office in tackling the core IT issues of leading global companies. You&rsquo;ll deploy customized platforms, architectures, strategies, and organizations to unlock the digital potential of our clients and drive real innovation. 
As a seamlessly integrated part of the BCG network, we provide consulting services focused on the development and implementation of business-critical IT architecture and digital solutions. We create technology platforms and deliver exceptionally customized solutions of the future for our clients, from data strategies to next-Generation customer journey solutions and transformational business models. We solve the most daunting challenges that companies face today and envision for tomorrow. Our style is entrepreneurial &ndash; nimble and innovative, with multifaceted, cross-functional teams and completely vendor-independent. Our unique selling proposition is technology expertise and delivery excellence. 
We support our clients&rsquo; total digital transformation through technology, design, cybersecurity, and risk management &amp; financial engineering capabilities. And together with BCG, BCG Platinion&rsquo;s interdisciplinary team of technical experts enable customized technical solutions and accelerate delivery value through new business platforms, application consolidations, and major system implementations. BCG Platinion was founded in 2000 in Germany to add deep technical expertise to Boston Consulting Group&rsquo;s existing capabilities. Today, our presence spans across the globe, with offices in Asia, Europe, and South and North America and most recently in the Middle East. 
 
About us 
Boston Consulting Group partners with leaders in business and society to tackle their most important challenges and capture their greatest opportunities. BCG was the pioneer in business strategy when it was founded in 1963. Today, we help clients with total transformation-inspiring complex change, enabling organizations to grow, building competitive advantage, and driving bottom-line impact. To succeed, organizations must blend digital and human capabilities. Our diverse, global teams bring deep industry and functional expertise and a range of perspectives to spark change. BCG delivers solutions through leading-edge management consulting along with technology and design, corporate and digital ventures&mdash;and business purpose. We work in a uniquely collaborative model across the firm and throughout all levels of the client organization, generating results that allow our clients to thrive. 
What You'll Do
As a Platinion IT Consultant, you will; 
<ul><li>
Shape the digital transformation of globally leading companies while balancing overarching technical solutions and individual client circumstances</li><li>
Enable your clients to build effective cybersecurity programs in line with their organizational goals</li><li>
Assess your clients&rsquo; cybersecurity posture and build mitigation strategies to close gaps</li><li>
Define strategic cybersecurity ambitions and design technical and non-technical initiatives to deliver them</li><li>
Develop innovative solutions and employ emerging technologies to combat diverse cybersecurity threats</li><li>
Communicate complex security concepts to client stakeholders across all levels</li><li>
Stay abreast of the latest cybersecurity trends, threats, and technologies to inform strategic initiatives</li><li>
Develop risk management frameworks and methodologies tailored to organizational needs</li><li>
Conduct risk assessments and build mitigation strategies in line with your client&rsquo;s risk profile</li><li>
Establish effective risk monitoring to prioritize mitigation efforts</li><li>
Develop and implement security measures tailored to operational technology (OT) environments</li><li>
 Conduct thorough security assessments of OT systems to identify vulnerabilities and risks</li><li>
Develop integrated security strategies for converging IT and OT environments</li></ul> 
What You'll Bring<ul><li>
You have a degree in cybersecurity, computer science, (business) informatics, or a related discipline</li><li>
You have 3 to 5 years of relevant experience in IT Consulting</li><li>
Strategic technology and management know-how 
o Technical analysis and evaluation of IT architectures
o Digitization of business processes
o Evaluation of technical solutions and their feasibility
o Handling of organizational and procedural aspects of IT management
o Development of business cases</li><li>
You have a proven track record of building cybersecurity programs for large and complex organizations</li><li>
You are an expert on cybersecurity best practices and standards</li><li>
You enjoy tackling complex digital challenges and are enthusiastic about developing and sharing solutions</li><li>
You feel comfortable in interdisciplinary teams and global contexts</li><li>
Formal qualifications in cybersecurity, for example
o CISSP
o CISM
o CISA
o CSSP
o ISO 27001 LA/LI</li></ul> 
Additional info
How you can Grow with us: 
 
We guarantee constant new development incentives in an open and rewarding work environment. You'll face challenges every day together with a dedicated team of talented colleagues. Individual training offers and a culture of open feedback will provide the framework you need to explore and perfect your own strengths. Our modern structures enable you to stay focused. This includes easy travel booking, our excellent back-office support and a comprehensive Knowledge Center. We cultivate a strong and close team network from which you will also profit beyond your case work. 
Boston Consulting Group is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, age, religion, sex, sexual orientation, gender identity / expression, national origin, disability, protected veteran status, or any other characteristic protected under national, provincial, or local law, where applicable, and those with criminal histories will be considered in a manner consistent with applicable state and local laws.
 
BCG is an E - Verify Employer. Click here for more information on E-Verify.</div>

IT Consultant Cybersecurity - Platinion

Alhokair Group

4. Big ID Expert - Data Protection ConsultantCompany: Industry  Diversified Group Job Location  Riyadh, Saudi Arabia Career Level  Senior (Team Leader/Staff Supervisor) Date Posted  28-10-2025 Ref. Number  165780 Years of Experience: 5 - 16  Big ID Expert - Data Protection ConsultantJob Description and Requirements: Big ID Expert - Data Protection Consultant for our Banking domain Client in Riyadh. : Bachelor's degree in computer science, Information Technology, or a related field. 5+ years of experience working with the BigID platform or in a similar role. Demonstrable expertise in the Saudi Personal Data Protection Law (PDPL) and its Implementing Regulations. Proven experience working with data governance, privacy, and cybersecurity frameworks specific to the Saudi financial sector (e.g., SAMA's Cyber Security Framework, IT Governance Framework). Strong understanding of privacy principles such as data minimization, purpose limitation, and accountability. Excellent communication, interpersonal, and leadership skills, with the ability to influence stakeholders at all levels. High level of integrity and professional ethics, with the ability to handle confidential information with discretion. Kindly send CVs to : Industry  Diversified Group Job Location  Riyadh, Saudi Arabia Career Level  Senior (Team Leader/Staff Supervisor) Date Posted  28-10-2025 Ref. Number  165780 Years of Experience: 5 - 16

Big ID Expert - Data Protection Consultant

Explore 206+ Offensive cybersecurity consultant in Riyadh this January. Find roles across top companies and apply now to boost your career.

206 offensive cybersecurity consultant jobs IN Riyadh

Offensive Cybersecurity Consultant

Offensive Cybersecurity Consultant

Director of Cybersecurity

Cybersecurity Consultant

Risk Management Consultant & Business Continuity Consultant

IT Consultant Cybersecurity - Platinion

Big ID Expert - Data Protection Consultant