Senior Network Security Engineer Permanent
Senior Network & Email Security Engineer (5+ Years) – Saudi National
Location: Riyadh, Saudi Arabia (On-site)
Job Summary
This role is responsible for maintaining a secure network perimeter and protecting enterprise email systems within a regulated environment. You will own day-to-day operations, incident response, system hygiene, and change management across network security and email security platforms, ensuring full audit readiness and operational stability.
Key Responsibilities
1. Network Security Operations
- Perform daily health checks on next-generation firewall (NGFW) environments (clusters, updates, HA status)
- Manage and optimise firewall rulebases (remove unused rules, enforce least privilege)
- Maintain VPN environments (site-to-site and remote access), including MFA integration
- Troubleshoot network traffic issues using logs, packet capture (PCAP), and analysis tools
2. Email Security Operations
- Manage secure email gateway policies (inbound/outbound filtering, anti-phishing, BEC protection)
- Oversee URL rewriting, attachment sandboxing, and quarantine workflows
- Work with messaging teams on SPF, DKIM, and DMARC configurations
- Support end users with email security processes (release requests, false positives/negatives)
3. Incident Response & Threat Management
- Lead high-priority (P1) incidents across network and email environments
- Coordinate with SOC teams (SIEM alerts, playbooks)
- Execute containment actions and conduct root cause analysis (RCA)
4. Change Management & Upgrades
- Prepare and execute CAB-approved changes (patching, upgrades, policy updates)
- Conduct post-change validation and documentation
5. Compliance & Audit Readiness
- Maintain audit-ready documentation (change logs, policies, incident reports)
- Align with regulatory frameworks (e.g., NCA CSF, SAMA)
- Support internal and external audits with traceable evidence
6. Documentation & Knowledge Transfer
- Develop SOPs and runbooks for operations and incident handling
- Mentor junior team members and support knowledge transfer
Required Skills & Experience
- Saudi National
- 5+ years in network and email security operations
- Hands-on experience with:
- NGFWs (e.g., Palo Alto or equivalent)
- Secure Email Gateways (e.g., Proofpoint or equivalent)
- Strong understanding of:
- VPNs, IPS/IDS, URL filtering, SSL decryption
- Email security protocols and mail flow
- Strong incident and change management discipline
- Excellent documentation and communication skills (English required, Arabic a plus)
Preferred
- Experience in regulated sectors (e.g., banking, government)
- SIEM/SOAR integration experience
- Certifications such as PCNSE, SEG certifications, ITIL
Success Metrics (First 3–6 Months)
- Firewall rulebase optimisation and improved security posture
- Stable VPN performance with defined SLAs
- Reduction in phishing/BEC incidents and improved email filtering accuracy
- Audit-ready documentation and compliance alignment
Working Model
- On-site in Riyadh (Sunday–Thursday)
- On-call availability for critical incidents and planned changes