Cyber Security Specialist

Masharah Advisory

Jeddah, KSA

Full-time

Entry

Hybrid

Discovered 3 weeks ago

CybersecurityInfrastructure SecuritySecurity ArchitectureRisk ManagementNetwork SecurityFirewalls

Apply

Free

Job Fit Check

Base Career helps you apply smarter for this job.

Ready to Scan

Key skills for this role

CybersecurityInfrastructure SecuritySecurity Architecture

Smart Apply

Full Job Posting

Role Description

We are looking for an experienced Cybersecurity & Infrastructure Security Specialist to take ownership of the company’s cybersecurity requirements, security architecture, risk management, and overall security posture.

The role involves identifying security risks and gaps, defining the required security controls, evaluating and selecting appropriate solutions, leading technical discussions with service providers, and overseeing implementation.

The ideal candidate will have strong practical understanding of cybersecurity principles and security architecture, and experience conducting security assessments and identifying security gaps and risks.

Key Responsibilities

Own and continuously assess the company’s overall cybersecurity and infrastructure security posture.
Conduct security assessments and identify security gaps, risks, vulnerabilities, and areas requiring improvement.
Define cybersecurity requirements, security controls, and technical security standards.
Develop and review security architecture covering Network Security, Firewalls, Network Segmentation, DMZ, VPN, Servers & Virtualization, Identity & Access Management, EDR/XDR, SIEM/SOC, Backup & Disaster Recovery, and Application & Data Security.
Develop cybersecurity and infrastructure security requirements for external service providers.
Identify, evaluate, and recommend appropriate cybersecurity technologies and solutions.
Lead technical meetings and discussions with cybersecurity, network, infrastructure, and other service providers.
Challenge and evaluate vendors’ proposed architectures, technologies, configurations, and security recommendations.
Review security architecture, HLDs, LLDs, technical proposals, BoQs, and implementation plans.
Oversee security implementation and ensure agreed security requirements and controls are correctly implemented.
Validate and test security controls before accepting implemented solutions.
Establish and oversee vulnerability management and remediation processes.

Requirements

3–5+ years of professional experience in Cybersecurity, Infrastructure Security, Network Security, Security Engineering, or a closely related field.
Strong practical understanding of cybersecurity principles and security architecture.
Demonstrated experience conducting security assessments and identifying security gaps and risks.
Strong knowledge of network security, including Firewalls, IPS/IDS, Network segmentation, VLANs, DMZ, VPN, and secure remote access.
Knowledge of IAM, MFA, RBAC, PAM, and privileged-access management.
Experience or strong understanding of EDR/XDR, SIEM, SOC, security monitoring, and centralized logging.
Understanding of WAF and web/application security.
Knowledge of vulnerability management and penetration-testing processes.
Understanding of backup, disaster recovery, business continuity, RTO/RPO, and ransomware resilience.
Familiarity with GitHub, CI/CD, DevSecOps, and application security is a strong advantage.
Ability to review, evaluate, and challenge technical architectures, security designs, configurations, and vendor proposals.
Strong experience communicating with technical stakeholders, vendors, and service providers.

Preferred Certifications

CISSP / CISM, Security+, CCNA / CCNP, Palo Alto Networks certifications, Fortinet certifications, ISO 27001-related certifications, Other relevant cybersecurity or infrastructure security certifications.