Senior Security Engineer (NCA, DLP, Network Security)

Job Summary

Key Responsibilities

• Design and review enterprise security architectures aligned with NCA Essential Cybersecurity Controls (ECC) and other applicable regulatory frameworks.
• Architect and oversee network security solutions, including firewalls, WAF, VPN, network segmentation, Zero Trust, and intrusion prevention systems.
• Design and implement DLP strategies to protect sensitive information across endpoints, networks, email, and cloud environments.
• Conduct security architecture reviews, threat modelling, risk assessments, and security gap analyses.
• Define security policies, technical standards, and reference architectures aligned with business and compliance requirements.
• Collaborate with infrastructure, cloud, application security, and SOC teams to integrate security controls into enterprise environments.
• Evaluate security technologies, lead proof-of-concept exercises, and provide technical guidance on solution implementation.
• Support security audits, compliance assessments, remediation activities, and risk reporting.

Required Skills and Qualifications

• Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related field.
• 5+ years of experience in cybersecurity, with significant experience in enterprise security architecture.
• Strong knowledge of NCA ECC requirements and experience implementing or assessing cybersecurity controls.
• Hands-on experience or architecture-level expertise in DLP solutions such as Digital Guardian, Forcepoint, Symantec, or Microsoft Purview.
• Strong understanding of network security technologies, including firewalls, WAF, IDS/IPS, VPN, and network segmentation.
• Knowledge of Zero Trust Architecture, IAM, vulnerability management, SIEM, and incident response.
• Relevant certifications such as CISSP, CISM, CCSP, or vendor-specific security certifications are preferred.
• Strong communication, stakeholder management, and technical documentation skills.

Preferred

• Experience working in regulated enterprise environments in Saudi Arabia, with knowledge of applicable NCA cybersecurity requirements.