Security and ICT Engineer - Network Protection

Security and ICT Engineer - Network Protection in Riyadh, Saudi Arabia is a Computer and Network Security opportunity focused on safeguarding ICT infrastructure, strengthening network resilience, and maintaining compliance with recognized cybersecurity standards. AECOM is hiring an experienced security engineer to manage secure network architecture, vulnerability assessment, firewalls, intrusion prevention, incident response, security audits, data protection, and technical risk controls across critical digital environments.

Country:
Saudi Arabia

City:
Riyadh

Industry: Computer and Network Security

Function:
Computer-Network Security

Salary:  Estimated salary range based on similar jobs in the job city; please confirm the final offer with the employer.

Gender: Any

Nationality:
Any

Job Type: Full-time

Role Context The Security and ICT Engineer will protect business-critical systems by combining network engineering, cybersecurity controls, continuous monitoring, and structured risk management. The role requires a strong understanding of how ICT infrastructure is designed, operated, and secured against evolving internal and external threats. A core responsibility is to reduce security exposure before incidents occur. This includes vulnerability assessment, penetration testing, firewall configuration, intrusion detection, patch coordination, and regular review of security controls against established frameworks such as ISO 27001 and NIST.

The position also supports operational resilience by responding to security events, documenting remediation activities, and maintaining evidence for compliance and audit requirements. Close collaboration with IT teams and technical stakeholders will help ensure that security is embedded into infrastructure changes rather than treated as a separate activity.

• Design and maintain secure ICT infrastructure and network environments.
• Develop network security architectures that protect critical systems, services, and data.
• Configure and administer firewalls, intrusion detection systems, and intrusion prevention technologies.
• Conduct vulnerability assessments across network devices, systems, and applications.
• Perform or coordinate penetration testing to identify exploitable weaknesses.
• Analyze vulnerability findings and prioritize remediation according to business risk.
• Monitor network traffic, system logs, and security alerts for suspicious activity.
• Investigate potential security incidents and determine appropriate containment actions.
• Support incident response, recovery, and post-incident technical analysis.
• Maintain documented procedures for security escalation and remediation.
• Develop and enforce security policies, protocols, and technical standards.
• Align security controls with ISO 27001, NIST, and other applicable frameworks.
• Conduct security audits and evaluate compliance with internal and external requirements.
• Maintain accurate records of security configurations, incidents, findings, and corrective actions.
• Coordinate security patches, system updates, and infrastructure improvements with IT teams.
• Review network architecture and identify opportunities to strengthen segmentation and access controls.
• Apply data protection and encryption technologies to sensitive information and communications.
• Troubleshoot network security and ICT infrastructure issues.
• Investigate authentication, connectivity, firewall, and access-related problems.
• Support secure configuration of servers, endpoints, networking devices, and security appliances.
• Assess emerging cyber threats and recommend practical preventive measures.
• Evaluate security tools and technologies against operational requirements.
• Support risk assessments for new systems, infrastructure changes, and technical projects.
• Maintain awareness of cybersecurity regulations and market requirements relevant to Saudi Arabia.
• Assist with security compliance documentation and audit evidence.
• Provide security guidance to technical teams and end-users.
• Promote appropriate password, access, data handling, and cyber hygiene practices.
• Support deployment and operation of SIEM platforms where applicable.
• Review SIEM alerts and assist with event correlation and investigation.
• Apply automation or scripting where appropriate to improve repetitive security processes.
• Contribute to cloud security assessments and infrastructure protection where required.
• Maintain clear technical documentation for network and security architecture.
• Work independently on assigned security priorities while collaborating across multidisciplinary technical teams.

Candidates should bring at least 10 years of professional experience in network security, cybersecurity engineering, ICT infrastructure management, or a closely related technical field. A strong understanding of network architecture, system administration, security protocols, and infrastructure protection is essential. The successful candidate should be comfortable working with firewalls, intrusion detection and…