Senior Cyber Security Engineer KSA

Company: Qualcomm Middle East Information Technology Company LLC

Job Area: Information Technology Group, Information Technology Group >
Cyber Security Engineering

We are a collaborative team that is always learning, sharing, and researching. You will work with engineers and business stakeholders across the company to secure complex infrastructure and applications. You will need communication, analytical, and interpersonal skills, and the ability to learn and grow in a rapidly evolving environment. We welcome candidates who are passionate about cybersecurity and eager to learn and grow as engineers on our team.

At Qualcomm, we are committed to fostering a culture of innovation, collaboration, creativity, and diverse viewpoints. A significant part of our success comes from our ability to collaborate effectively, analyze complex problems, identify potential solutions, and ultimately converge on a winning strategy. Join us and be part of a team dedicated to pushing the boundaries of technology and making a positive impact on the world.

We are looking for those who have experience in the areas listed, but even more importantly a strong desire to learn and grow as a Cybersecurity Sr. Staff and team player. At this level, we are committed to providing training opportunities to acclimate new employees to how Qualcomm’s cybersecurity team operates.

You must have 10+ years of Cyber Security experience

• 10+ years of cybersecurity‑relevant work experience with a Bachelor's degree in Engineering, Information Systems, Computer Science, or related field.
• Familiarity with Programming Language such as C, C++, Java, Python, etc.
• 1+ year in a technical leadership role with or without direct reports.
• 1+ year of work experience in a role requiring interaction with senior leadership (e.g., Director level and above).
• Cybersecurity‑relevant certifications.
• Fluency in Arabic.

• Serve as the technical security lead for large datacenter and sovereign AI deployments, applying deep expertise in areas such as cryptography, key management, and secure architecture to drive programs to completion.
• Design and operationalize Infrastructure Identity & PKI, producing detailed runbooks for operations to maintain end‑to‑end mTLS, manage certificate life cycles, and secure private keys and secrets using a KMS as required.
• Own perimeter security architecture and hands‑on firewall operations, configuring and managing next‑generation firewalls (e.g., Palo Alto, Fortinet) to enforce customer‑driven ingress/egress policies and secure cluster boundaries.
• Lead Data Sovereignty & Compliance assurance, auditing system architecture against applicable regulatory, cybersecurity, and data protection frameworks (e.g., KSA NCA ECC, Cloud Cybersecurity Controls (CCC), and PDPL) to ensure sovereign AI data remains resident, controlled, and protected within datacenter boundaries.
• Architect storage security controls in collaboration with operations, implementing encryption at rest and strict NFS/S3 access controls on VAST/DDN platforms to safeguard training data, model weights, and sensitive assets.
• Define Kubernetes & container security posture with software teams, establishing cluster security policies and enforcing pod security standards to isolate inference workloads.
• Drive vulnerability management across the inference software stack, partnering with engineering teams to implement scanning, prioritization, and remediation of critical CVEs, and tracking fixes through closure.
• Lead Security Incident Response activities, acting as the primary escalation point for the Managed Security Service Provider (MSP), coordinating investigation, containment, remediation, and post‑incident root cause analysis for security events.
• Lead security architecture reviews and root cause analyses, producing actionable findings and updates for senior leadership (e.g., Sr. Director+), and reviewing technical documentation and security architecture diagrams before publication to ensure accuracy and completeness.
• Design and enforce identity and access management controls across…