Requirements
The IT Security Engineer role requires a Bachelor's degree in Computer Engineering, Computer Science, Cybersecurity, Information Technology, or a related field. Candidates can be fresh graduates or have up to 2 years of experience in Information Security, Cybersecurity, or IT. Relevant cybersecurity certifications such as CompTIA Security+, CEH, or ISO 27001 Foundation are preferred. A basic understanding of security governance, risk management, and compliance concepts, along with knowledge of network and infrastructure security, application security, security monitoring, and Saudi cybersecurity regulations is necessary.
Description
Job Description:The IT Security Engineer supports the implementation of security standards, monitoring activities, and basic compliance requirements to help protect IT systems, applications, and data.This role is suitable for a fresh graduate who will learn and assist in security awareness, code scanning before deployments, vulnerability follow-up, and applying Saudi cybersecurity regulations under the guidance of senior IT team members.Responsibilities:Security Governance & Compliance Support:Assist in implementing IT security standards and internal security policiesSupport compliance activities related to Saudi cybersecurity regulations and internal requirementsHelp maintain security documentation, checklists, and basic audit evidenceCoordinate with senior team members to follow up on required security actionsThreat & Vulnerability Management:Monitor security alerts and escalate suspicious activities to senior IT team membersAssist in vulnerability scanning and follow up on remediation statusSupport patching and corrective actions by tracking findings and sharing updatesMaintain security incident logs and coordinate with relevant teams for incident resolution. Application & Infrastructure Security:Secure all application and infrastructure layers, including web, backend, APIs, databases, and client applications. Perform basic code security scanning before deployments and report identified risksImplement access control, authentication, encryption, and secure configurations. Collaborate with DevOps and Infra teams to ensure secure deployment of pipelines. Knowledge Management & Training:Develop security guidelines, SOPs, and documentation. Conduct training sessions and workshops to raise awareness among internal users and technical teams. Promote a security-conscious culture across the organization. Collaboration & Technical Delivery:Work closely with Infra, DevOps, and Development teams for secure architecture and operations. Review and approve security measures for new tools, applications, and integrations. Advice on security requirements for new projects, features, or customer integrations. Job Relations:Reports to: IT Infrastructure Lead / IT ManagerInternal Relations: DevOps Engineer, Infra Engineer, QA, Development Teams, IT SupportExternal Communications:Communicate with regulators and auditors to ensure compliance and provide reportsLiaise with external vendors for security assessments, penetration tests, and certificationsEscalate critical security risks to IT leadership and managementRequirementsBachelor's degree in Computer Engineering, Computer Science, Cybersecurity, Information Technology, or related fieldFresh graduate or up to 2 years of experience in Information Security, Cybersecurity, or IT. Relevant cybersecurity certifications or training, such as CompTIA Security+, CEH, ISO 27001 Foundation, or equivalent certifications. Basic understanding of security governance, risk management, and compliance concepts. Knowledge of: Network and infrastructure security (Firewalls, VPNs, IDS/IPS). Application security (Web, APIs, Mobile Applications). Security monitoring and SIEM platforms. Backup, Disaster Recovery (DR), and Business Continuity concepts. Secure Software Development Lifecycle (SSDLC). Security code scanning and vulnerability management. Saudi cybersecurity regulations and frameworks (NCA ECC, PDPL, ISO 27001) awareness is preferred. Competencies:Willingness to learn and develop technical security skillsRisk-aware mindset with attention to detailBasic ability to understand security standards and translate them into daily operational tasksCollaboration and influence across technical and non-technical teamsProactive attitude toward security awareness, documentation, and continuous improvementSkills & Languages:Vulnerability management, penetration testing, and threat intelligenceSecurity monitoring and SIEM toolsNetwork security, firewalls, VPNs, encryption, IAMApplication security best practicesBackup, disaster recovery, and business continuity planningFluent in English (required)Arabic proficiency (preferred)