Cyber Security Specialist

We’re Hiring | Cybersecurity & Infrastructure Security Specialist

Company: [Masharah Company]

We are looking for an experienced Cybersecurity & Infrastructure Security Specialist to take ownership of the company’s cybersecurity requirements, security architecture, risk management, and overall security posture.

This role will serve as the company’s technical security authority and primary security representative when dealing with external cybersecurity, infrastructure, network, and technology service providers.

The successful candidate will be responsible for identifying security risks and gaps, defining the required security controls, evaluating and selecting appropriate solutions, leading technical discussions with service providers, overseeing implementation, and validating that the delivered environment meets the company’s security requirements.

• Own and continuously assess the company’s overall cybersecurity and infrastructure security posture.
• Conduct security assessments and identify security gaps, risks, vulnerabilities, and areas requiring improvement.
• Define cybersecurity requirements, security controls, and technical security standards.
• Develop and review security architecture covering:
  • Network Security
  • Firewalls / NGFW
  • Network Segmentation
  • DMZ / WAF
  • VPN / ZTNA
  • Servers & Virtualization
  • Identity & Access Management
  • EDR/XDR
  • SIEM / SOC
  • Backup & Disaster Recovery
  • Application & Data Security
• Develop cybersecurity and infrastructure security requirements for external service providers.
• Identify, evaluate, and recommend appropriate cybersecurity technologies and solutions.
• Lead technical meetings and discussions with cybersecurity, network, infrastructure, and other service providers.
• Challenge and evaluate vendors’ proposed architectures, technologies, configurations, and security recommendations.
• Review security architecture, HLDs, LLDs, technical proposals, BoQs, and implementation plans.
• Oversee security implementation and ensure agreed security requirements and controls are correctly implemented.
• Validate and test security controls before accepting implemented solutions.
• Establish and oversee vulnerability management and remediation processes.
• Coordinate penetration testing and security assessments and ensure findings are properly remediated.
• Define and oversee security monitoring, logging, SIEM/SOC, EDR/XDR, and alerting requirements.
• Establish incident response, containment, recovery, and security incident-handling requirements.
• Define and review IAM, MFA, RBAC, PAM, privileged access, and network access-control requirements.
• Ensure appropriate security hardening and secure configuration of infrastructure and security systems.
• Review Git Hub, CI/CD, Dev Sec Ops , and application security practices where applicable.
• Review backup, disaster recovery, business continuity, RTO/RPO, and ransomware-resilience requirements.
• Assess data protection, data residency, and cross-border data-transfer considerations.
• Identify applicable Saudi cybersecurity and data protection requirements and support compliance efforts.
• Maintain cybersecurity policies, standards, risk registers, security architecture, and technical documentation.
• Provide management with regular updates on security risks, gaps, priorities, and remediation progress.
• Act as the primary technical security representative between the company and external service providers.

• 3–5+ years of professional experience in Cybersecurity, Infrastructure Security, Network Security, Security Engineering, or a closely related field.
• Strong practical understanding of cybersecurity principles and security architecture.
• Demonstrated experience conducting security assessments and identifying security gaps and risks.
• Strong knowledge of network security, including:
  • Firewalls / NGFW
  • IPS/IDS
  • Network segmentation
  • VLANs
  • DMZ
  • VPN / ZTNA
  • Secure remote access
• Good understanding of server, virtualization, endpoint, and infrastructure security.
• Knowledge of IAM, MFA, RBAC, PAM, and privileged-access management.
• Experience or strong understanding of EDR/XDR, SIEM, SOC, security monitoring, and centralized logging.
• Understanding of WAF and web/application security.
• Knowledge of…