IT Security Engineer

Job Description:

The IT Security Engineer supports the implementation of security standards, monitoring activities, and basic compliance requirements to help protect IT systems, applications, and data.

This role is suitable for a fresh graduate who will learn and assist in security awareness, code scanning before deployments, vulnerability follow-up, and applying Saudi cybersecurity regulations under the guidance of senior IT team members.

• Assist in implementing IT security standards and internal security policies.
• Support compliance activities related to Saudi cybersecurity regulations and internal requirements.
• Help maintain security documentation, checklists, and basic audit evidence.
• Coordinate with senior team members to follow up on required security actions.

• Monitor security alerts and elevate suspicious activities to senior IT team members.
• Assist in vulnerability scanning and follow up on remediation status.
• Support patching and corrective actions by tracking findings and sharing updates.
• Maintain security incident logs and coordinate with relevant teams for incident resolution.

• Secure all application and infrastructure layers, including web, backend, APIs, databases, and client applications.
• Perform basic code security scanning before deployments and report identified risks.
• Implement access control, authentication, encryption, and secure configurations.
• Collaborate with Dev Ops and Infra teams to ensure secure deployment of pipelines.

• Develop security guidelines, SOPs, and documentation.
• Conduct training sessions and workshops to raise awareness among internal users and technical teams.
• Promote a security-conscious culture across the organization.

• Work closely with Infra, Dev Ops, and Development teams for secure architecture and operations.
• Review and approve security measures for new tools, applications, and integrations.
• Advice on security requirements for new projects, features, or customer integrations.

• Reports to:
  
  IT Infrastructure Lead / IT Manager.
• Internal Relations:
  Dev Ops Engineer, Infra Engineer, QA, Development Teams, IT Support.

• Communicate with regulators and auditors to ensure compliance and provide reports.
• Liaise with external vendors for security assessments, penetration tests, and certifications.
• Escalate critical security risks to IT leadership and management.

• Bachelor’s degree in Computer Engineering, Computer Science, Cybersecurity, Information Technology, or related field.
• Fresh graduate or up to 2 years of experience in Information Security, Cybersecurity, or IT.
• Relevant cybersecurity certifications or training, such as CompTIA Security+, CEH, ISO 27001 Foundation, or equivalent certifications
  .
• Basic understanding of security governance, risk management, and compliance concepts.

• Network and infrastructure security (Firewalls, VPNs, IDS/IPS).
• Application security (Web, APIs, Mobile Applications).
• Security monitoring and SIEM platforms.
• Backup, Disaster Recovery (DR), and Business Continuity concepts.
• Secure Software Development Lifecycle (SSDLC).
• Security code scanning and vulnerability management.
• Saudi cybersecurity regulations and frameworks (NCA ECC, PDPL, ISO 27001) awareness is preferred.

• Willingness to learn and develop technical security skills.
• Risk-aware mindset with attention to detail.
• Basic ability to understand security standards and translate them into daily operational tasks.
• Collaboration and influence across technical and non-technical teams.
• Proactive attitude toward security awareness, documentation, and continuous improvement.

• Vulnerability management, penetration testing, and threat intelligence
• Security monitoring and SIEM tools
• Network security, firewalls, VPNs, encryption, IAM
• Application security best practices.
• Backup, disaster recovery, and business continuity planning
• Fluent in English (required).
• Arabic proficiency (preferred).