Cybersecurity Engineer (3–11+ Years Experience)

Job Title: Cybersecurity Engineer

Experience: 3–11+ Years

Location: Riyadh, Saudi

Job Summary

We are seeking a skilled Cybersecurity Engineer to protect enterprise applications, infrastructure, and cloud environments by implementing robust security controls, identifying vulnerabilities, and responding to security threats. The ideal candidate will have experience with application security, cloud security, identity and access management, vulnerability management, and security automation while ensuring compliance with organizational and industry security standards.

Key Responsibilities

• Design, implement, and maintain enterprise security controls across applications, infrastructure, and cloud environments.
• Perform vulnerability assessments, security scans, penetration testing coordination, and risk assessments.
• Secure CI/CD pipelines by integrating automated security scanning tools.
• Monitor, investigate, and respond to security incidents and vulnerabilities.
• Implement identity and access management (IAM) and authentication solutions.
• Configure and manage Web Application Firewalls (WAFs) and cloud-native security services.
• Collaborate with development, DevOps, infrastructure, and compliance teams to implement secure-by-design practices.
• Develop security documentation, policies, standards, and incident response procedures.
• Support compliance initiatives and security audits.

Must Have Skills

• Experience with Trivy OR Grype OR Snyk OR Prisma Cloud for vulnerability and container image scanning.
• Experience with Gitleaks OR GitGuardian OR TruffleHog for secrets detection and source code security.
• Experience with Burp Suite OR OWASP ZAP OR Nessus OR Acunetix for application security testing and vulnerability assessment.
• Experience with Web Application Firewall (WAF) OR Google Cloud Armor OR AWS WAF OR Azure Web Application Firewall OR Cloudflare WAF.
• Experience with Okta OR Microsoft Entra ID (Azure AD) OR Ping Identity OR Auth0 OR Keycloak for identity and access management.
• Application Security AND Cloud Security AND Identity & Access Management (IAM) AND Vulnerability Management AND Incident Response.
• Knowledge of OWASP Top 10 AND Secure SDLC AND Threat Modeling.
• Experience with Linux AND Networking AND TCP/IP AND DNS AND HTTPS.
• Familiarity with Git AND GitHub OR GitLab OR Bitbucket.
• Strong analytical, troubleshooting, communication, and problem-solving skills.

Good to Have Skills

• SIEM platforms: Splunk OR Microsoft Sentinel OR QRadar OR Elastic Security.
• Container and Kubernetes security using Docker OR Kubernetes OR OpenShift.
• Cloud platforms: Google Cloud Platform (GCP) OR AWS OR Microsoft Azure.
• Security automation and scripting using Python OR Bash OR PowerShell.
• CI/CD tools: Jenkins OR GitHub Actions OR GitLab CI OR Azure DevOps.
• Compliance frameworks: ISO 27001 OR NIST Cybersecurity Framework OR CIS Controls OR SOC 2.
• Endpoint protection tools: Microsoft Defender OR CrowdStrike OR SentinelOne.
• Certifications: CompTIA Security+ OR CEH OR GSEC OR CISSP OR CCSP OR Google Professional Cloud Security Engineer.

Preferred Qualifications

• Bachelor's degree in Cybersecurity, Computer Science, Information Technology, or a related field.
• 3–11 years of experience in cybersecurity, application security, cloud security, or security engineering.
• Experience securing enterprise applications and cloud-native environments.
• Strong understanding of security architecture, risk management, and security best practices.
• Excellent communication skills and the ability to collaborate effectively with cross-functional teams.