Cyber Security SME

The Senior Cyber Security Engineer is a hands‑on role within Cyber Security Engineering function, responsible for the day‑to‑day operation, support, and continuous improvement of cybersecurity controls. The role also contributes to the implementation, enhancement, and optimisation of security solutions across the organisation, ensuring that cyber security capabilities remain effective, resilient, and aligned with business needs.

The role requires strong technical expertise across infrastructure, networking, and security tooling, with a focus on maintaining operational stability and supporting ongoing cyber security initiatives. Responsibilities include responding to security incidents, leading investigations into complex technical issues, supporting remediation activities, and executing security‑related change deployments in line with established change and governance processes.

You will act as a key point of contact for internal audit, IT risk, and security governance teams, ensuring alignment with regulatory frameworks (e.g., ISO 27001, SAMA, SWIFT CSCF) and internal security standards.

Domain Experience (Cyber Security SME)

• Strong experience across enterprise cybersecurity domains including network security, endpoint security, email security, web security and secure proxy solutions, perimeter defence technologies, edge security platforms, Zero Trust architectures and access controls, threat exposure management, and hands-on experience across both security engineering and operations.
• Hands-on experience designing, engineering, implementing, configuring and managing cybersecurity technologies across on-premises, cloud and hybrid environments.
• Strong understanding of security architecture, security controls, event flows, traffic flows, system integrations and interdependencies across enterprise technology platforms.
• Experience operating and maintaining cybersecurity solutions throughout their lifecycle, including onboarding, upgrades, policy tuning, optimisation, decommissioning and technology refresh activities.
• Expertise in security monitoring, operational management, incident investigation, troubleshooting and remediation, with the ability to identify root causes and drive continuous improvement.
• Hands-on experience with security telemetry, log analysis, alert management, dashboard reporting and operational metrics to identify security gaps and control deficiencies.
• Experience managing vulnerability remediation programmes, including vulnerability assessment review, prioritisation, remediation tracking, risk treatment and validation of control effectiveness.
• Strong experience with cybersecurity governance activities including security policies, standards, control reviews, exception management, compliance assessments and periodic security assurance exercises.
• Experience working across multiple cybersecurity platforms and vendors, with the ability to evaluate capabilities, define operational requirements and drive implementation and optimisation initiatives
• Hands-on experience integrating cybersecurity tools and controls with enterprise infrastructure, cloud services, identity platforms and operational processes.
• Familiarity with cybersecurity frameworks, risk management methodologies, regulatory requirements, security best practices and defence-in-depth strategies.
• Strong ability to translate business and security requirements into technical solutions while providing SME-level guidance across engineering, implementation and BAU operations.

Skills & experience

• Education and Experience:
  • Strong secondary-level education is required, ideally to A-level or equivalent standard, in a technical or analytical discipline.
  • A university degree is not essential, though a qualification in Cyber Security, Information Technology, Risk Management, or a related field would be considered advantageous.
  • 8+ years of experience in cyber security or information security roles.
• Knowledge and Skills:
  • Strong technical experience in Windows Server and Linux environments.
  • Strong technical understanding of infrastructure, networking, and operating systems.
  • Hands-on experience with one or more enterprise cyber security tools
  • Knowledge of regulatory frameworks (e.g., ISO 27001, CIS, NIST).
  • Comfortable supporting log analysis, access control configurations, and data protection tools.
  • Proficiency in troubleshooting integrated systems involving AD, DNS, GPO, and networked assets
  • Scripting or automation exposure (Python, Ansible, or PowerShell) is desirable.
  • Experience collaborating with audit, risk, and compliance stakeholders.
  • Excellent written and verbal communication skills for technical and non-technical audiences.

Desired but not necessary:

• Experience working with cloud platforms (Azure, AWS) or virtualized environments (e.g., VMware).
• Familiarity with ServiceNow ITSM.
• Knowledge of security frameworks such as CIS Benchmarks, ISO 27001, or NIST 800-53.