Cybersecurity Specialist

Job description / Role

Role summary

The Cybersecurity Specialist is a cross-functional role responsible for managing, maintaining, and supervising all cybersecurity controls at Saudi Motorsport Company. The specialist keeps security tools healthy, enforces policy, and ensures controls meet NCA requirements.

Key responsibilities

• Manage, maintain, and monitor SMC’s security controls, including firewalls, EDR/antivirus, email and web security, DLP, PAM, NAC, and SIEM log sources.
• Review and tune security policies and rules, and conduct regular configuration and health checks.
• Coordinate vulnerability scanning and track remediation with IT and application owners.
• Support patch management, system hardening, and secure baseline configurations.
• Manage user access reviews, privileged accounts, and identity controls.
• Work with the SOC team on alerts and incidents, and support investigation and containment.
• Keep controls aligned with NCA ECC and CCC, and support internal and external audits.
• Produce security reports, KPIs, and status updates for management.
• Supervise third-party vendors and managed service providers responsible for security controls.
• Raise security awareness and advise business teams on secure practices.

Requirements

• Bachelor’s degree in cybersecurity, computer science, IT, or a related field.
• Four to seven years of experience in cybersecurity operations or security engineering.
• Hands-on experience with at least three of the following: firewalls (Palo Alto, Fortinet, Check Point), EDR (CrowdStrike, Microsoft Defender, Trend Micro), SIEM (Splunk, QRadar, Sentinel), DLP, PAM (CyberArk, BeyondTrust, Delinea), or email security.
• Working knowledge of NCA ECC, CCC, and ISO 27001.
• Experience with vulnerability management tools such as Tenable, Qualys, or Rapid7.
• Saudi national with fluency in Arabic and English.

Preferred certifications

• CompTIA Security+, CySA+, CISSP, CEH, CCNA Security, or vendor certifications such as Palo Alto PCNSE, Fortinet NSE, or Microsoft SC-200.