IT Security Engineer

Job Description: The IT Security Engineer supports the implementation of security standards, monitoring activities, and basic compliance requirements to help protect IT systems, applications, and data. This role is suitable for a fresh graduate who will learn and assist in security awareness, code scanning before deployments, vulnerability follow-up, and applying Saudi cybersecurity regulations under the guidance of senior IT team members.

Responsibilities: Security Governance & Compliance Support: • Assist in implementing IT security standards and internal security policies. • Support compliance activities related to Saudi cybersecurity regulations and internal requirements. • Help maintain security documentation, checklists, and basic audit evidence. • Coordinate with senior team members to follow up on required security actions. Threat & Vulnerability Management: • Monitor security alerts and escalate suspicious activities to senior IT team members. • Assist in vulnerability scanning and follow up on remediation status. • Support patching and corrective actions by tracking findings and sharing updates. • Maintain security incident logs and coordinate with relevant teams for incident resolution. Application & Infrastructure Security: • Secure all application and infrastructure layers, including web, backend, APIs, databases, and client applications. • Perform basic code security scanning before deployments and report identified risks. • Implement access control, authentication, encryption, and secure configurations. • Collaborate with DevOps and Infra teams to ensure secure deployment of pipelines. Knowledge Management & Training: • Develop security guidelines, SOPs, and documentation. • Conduct training sessions and workshops to raise awareness among internal users and technical teams. • Promote a security-conscious culture across the organization. Collaboration & Technical Delivery: • Work closely with Infra, DevOps, and Development teams for secure architecture and operations. • Review and approve security measures for new tools, applications, and integrations. • Advice on security requirements for new projects, features, or customer integrations.

Job Relations: • Reports to: IT Infrastructure Lead / IT Manager. • Internal Relations: DevOps Engineer, Infra Engineer, QA, Development Teams, IT Support.

External Communications: • Communicate with regulators and auditors to ensure compliance and provide reports. • Liaise with external vendors for security assessments, penetration tests, and certifications. • Escalate critical security risks to IT leadership and management.

Requirements • Bachelor’s degree in Computer Engineering, Computer Science, Cybersecurity, Information Technology, or related field. • Fresh graduate or up to 2 years of experience in Information Security, Cybersecurity, or IT. • Relevant cybersecurity certifications or training, such as CompTIA Security+, CEH, ISO 27001 Foundation, or equivalent certifications . • Basic understanding of security governance, risk management, and compliance concepts.

Knowledge of: • Network and infrastructure security (Firewalls, VPNs, IDS/IPS). • Application security (Web, APIs, Mobile Applications). • Security monitoring and SIEM platforms. • Backup, Disaster Recovery (DR), and Business Continuity concepts. • Secure Software Development Lifecycle (SSDLC). • Security code scanning and vulnerability management. • Saudi cybersecurity regulations and frameworks (NCA ECC, PDPL, ISO 27001) awareness is preferred.

Competencies: • Willingness to learn and develop technical security skills. • Risk-aware mindset with attention to detail. • Basic ability to understand security standards and translate them into daily operational tasks. • Collaboration and influence across technical and non-technical teams. • Proactive attitude toward security awareness, documentation, and continuous improvement.

Skills & Languages: • Vulnerability management, penetration testing, and threat intelligence • Security monitoring and SIEM tools • Network security, firewalls, VPNs, encryption, IAM • Application security best practices. • Backup, disaster recovery, and business continuity planning • Fluent in English (required). • Arabic proficiency (preferred).