Senior Network and Cybersecurity Engineer

SSS is looking for a Senior Cybersecurity Engineer to own the security posture of our IT environment, from strategy and policy through daily operations and incident response. The role reports to the IT Manager and works closely with the Senior Network & Systems Administrator. It is offshore-based, serving Samir Group (KSA), and works full-time on-site from our Heliopolis office.

Key Responsibilities

• Own the cybersecurity program: strategy, roadmap, policies, standards and procedures.

• Design security architecture across network, cloud (Azure/AWS), identity, endpoints and email.

• Define and audit firewall policies, network segmentation and remote access controls.

• Lead identity security in Entra ID: MFA, Conditional Access, privileged access management and access reviews.

• Own Microsoft Defender (Endpoint, Office 365, Identity, Cloud) and Intune security and compliance baselines.

• Run security monitoring and threat detection (SIEM, IDS/IPS), including use-case tuning and alert triage.

• Lead incident response: investigation, containment, remediation, root cause analysis and post-incident reporting.

• Own the vulnerability management lifecycle: scanning, risk-based prioritization, remediation tracking and reporting.

• Lead compliance with NCA ECC and ISO 27001, and prepare for internal and external audits.

• Run IT security risk assessments and evaluate third-party and vendor risk.

• Run security awareness programs and phishing simulations.

• Report on security posture, risks and KPIs to the IT Manager and management.

Requirements

• Bachelor's degree in IT, Computer Science, Cybersecurity or a related field.

• 6+ years of experience in cybersecurity, with at least 2 years at a senior level.

• Deep hands-on expertise with the Microsoft security stack: Defender, Entra ID security, Intune compliance and Microsoft Sentinel.

• Proven experience leading incident response and vulnerability management programs.

• Strong understanding of network security, firewalls and cloud security (Azure/AWS).

• Hands-on experience with NCA ECC and/or ISO 27001 implementation or audits.

• Certifications such as CISSP, CISM, SC-100/SC-200 or OSCP are strongly preferred.

• Excellent written and spoken English.