مهندس أمن سيبراني أول

Overview

We are seeking an experienced Senior Cybersecurity Engineer to safeguard the company’s IT infrastructure, networks, servers, endpoints, and business systems against evolving cyber threats. The ideal candidate brings strong hands-on experience in threat detection, security monitoring, incident response, firewall management, and vulnerability management, and will play a key role in strengthening our overall security posture.

Role Overview

As a Senior Cybersecurity Engineer, you will be responsible for designing, implementing, and maintaining security controls that protect the organization’s IT environment. You will monitor and analyze security events, lead investigations and incident response activities, manage firewall policies and network security configurations, and run vulnerability management programs from identification through remediation. You will also collaborate closely with IT, network, and business teams to embed security best practices across systems and projects, and provide technical guidance to junior team members.

Requirements

• Bachelor's degree in Cybersecurity, Computer Science, Information Technology or a related discipline.
• Minimum 5 years of hands-on experience in cybersecurity, security operations or network security.
• Strong knowledge of TCP/IP, routing, switching, VLANs, VPNs, DNS, network protocols and enterprise security architecture.
• Practical experience with enterprise firewalls such as Fortinet FortiGate, SonicWall, Palo Alto Networks or equivalent.
• Experience investigating security alerts, analyzing logs and handling security incidents.
• Working knowledge of SIEM, EDR/XDR, IDS/IPS, vulnerability scanners and endpoint protection.
• Understanding of Windows Server, Active Directory, identity security, patch management and MFA.
• Knowledge of incident response, threat intelligence, vulnerability management and security hardening.
• Ability to prepare technical reports, document incidents and communicate risks clearly.
• Strong analytical, troubleshooting and problem-solving skills.
• Preferred Qualifications: Relevant certification such as CompTIA Security+, CySA+, GCIH, CISSP or a firewall vendor certification.
• Preferred Qualifications: Experience with Microsoft Sentinel, Splunk, QRadar or similar SIEM platforms.
• Preferred Qualifications: Experience with Microsoft Defender for Endpoint or equivalent EDR/XDR solutions.
• Preferred Qualifications: Familiarity with penetration testing reports, MITRE ATT&CK, NIST Cybersecurity Framework and ISO 27001.
• Preferred Qualifications: Experience with cloud security, email security, DLP and security automation.
• Preferred Qualifications: Experience in a multi-site enterprise environment.

Key Responsibilities

• Monitor security alerts, network traffic, firewall logs and endpoint security events to identify suspicious activities.
• Investigate and respond to cybersecurity incidents, including malware, phishing, ransomware, unauthorized access and compromised accounts.
• Configure, manage and troubleshoot enterprise firewalls, VPNs, IDS/IPS and network security policies.
• Operate SIEM and EDR/XDR platforms for threat detection, correlation and incident investigation.
• Perform vulnerability assessments, coordinate penetration testing and ensure remediation of identified vulnerabilities.
• Conduct threat hunting and analyze indicators of compromise (IOCs).
• Secure network infrastructure, servers, endpoints, cloud services and Microsoft 365 environments as applicable.
• Review firewall rules, access permissions, privileged accounts, MFA and security configurations.
• Develop and maintain incident response procedures, security policies, technical documentation and reports.
• Support security audits, risk assessments, business continuity and disaster recovery activities.
• Coordinate with IT, network, infrastructure and external security teams during incidents.
• Provide recommendations to management to reduce cybersecurity risks.

Apply Now