Arabic.AI

Operations and Security Engineer

Riyadh, Saudi ArabiaPosted 3 days ago

Apply link checked 2 days ago

Salary
AED 15k–20k a month· est.
Job type
Full time
Level
Senior
Field
Technology, AI, Products & PMO
Work mode
On site

About the role

What you will do  - Monitor the platform around the clock, respond to alerts, troubleshoot, fix and restore service.  - Handle emergencies inside or outside office hours, and turn around any report the client asks   - Patch, harden and run regular vulnerability reviews on every component; keep endpoint protection compatible.  - Implement and operate the security controls: identity and access with MFA, RBAC and single sign-on; encryption everywhere; separated dev, test and production; signed and verified automation code; file-type whitelisting; mobile-device restrictions.  - Run security logging, audit logs and the SIEM integration; protect logs from tampering.  - Secure the APIs: gateway, OAuth 2.0, OWASP API security.  - Own backups, business continuity and disaster recovery, and test them.  - Run incident response: immediate notification, an initial report within 24 hours, documented procedures with SLAs and escalation.  - Write the security architecture and API design documents and the infrastructure parts of the architecture pack, and the bi-monthly operations report.  What you need  - Linux and Windows server administration on public and sovereign clouds (GCP, OCI, Deem or similar)  - Administration of at least two of Qlik Sense, Talend, Dataiku and MS SQL Server, plus GCP services  - Monitoring and alerting (Cloud Logging and Monitoring, Prometheus and Grafana or similar) and runbooks  - Incident management: triage, escalation, root-cause reports  - Identity and access: IAM, MFA, RBAC, SSO integration  - Encryption at rest and in transit, key management, certificates  - Vulnerability scanning, patching and hardening; working with endpoint-protection tools  - SIEM integration and audit-log design  - API gateways, OAuth 2.0, OWASP API Security Top Ten  - Backup, restore, business continuity and disaster recovery in the cloud  Good to have  - Terraform and CI/CD; SRE practice (SLOs, error budgets, cost alerts)  - MS SQL Server DBA depth  - Google Professional Cloud Security Engineer, CISSP, CCSP or ITIL  - Experience with national cybersecurity-control audits

Requirements

  • Linux and Windows server administration on public and sovereign clouds (GCP, OCI, Deem or similar)
  • Administration of at least two of Qlik Sense, Talend, Dataiku and MS SQL Server, plus GCP services
  • Monitoring and alerting (Cloud Logging and Monitoring, Prometheus and Grafana or similar) and runbooks
  • Incident management: triage, escalation, root-cause reports
  • Identity and access: IAM, MFA, RBAC, SSO integration
  • Encryption at rest and in transit, key management, certificates
  • Vulnerability scanning, patching and hardening; working with endpoint-protection tools
  • SIEM integration and audit-log design
  • API gateways, OAuth 2.0, OWASP API Security Top Ten
  • Backup, restore, business continuity and disaster recovery in the cloud

Responsibilities

  • Monitor the platform around the clock, respond to alerts, troubleshoot, fix and restore service.
  • Handle emergencies inside or outside office hours, and turn around any report the client asks
  • Patch, harden and run regular vulnerability reviews on every component; keep endpoint protection compatible.
  • Implement and operate the security controls: identity and access with MFA, RBAC and single sign-on; encryption everywhere; separated dev, test and production; signed and verified automation code; file-type whitelisting; mobile-device restrictions.
  • Run security logging, audit logs and the SIEM integration; protect logs from tampering.
  • Secure the APIs: gateway, OAuth 2.0, OWASP API security.
  • Own backups, business continuity and disaster recovery, and test them.
  • Run incident response: immediate notification, an initial report within 24 hours, documented procedures with SLAs and escalation.
  • Write the security architecture and API design documents and the infrastructure parts of the architecture pack, and the bi-monthly operations report.

Skills

  • Linux server administration
  • Windows server administration
  • GCP
  • OCI
  • Qlik Sense
  • Talend
  • Dataiku
  • MS SQL Server
  • Prometheus
  • Grafana
  • Cloud Logging and Monitoring
  • IAM
  • MFA
  • RBAC
  • SSO
  • encryption at rest and in transit
  • key management
  • certificates
  • Vulnerability scanning
  • patching
  • endpoint-protection tools
  • SIEM integration
  • audit-log design
  • API gateways
  • OAuth 2.0
  • OWASP API Security Top Ten
  • backup and disaster recovery
  • incident management

Not sure you fit this role?

Upload your CV and see how you score against Arabic.AI and every other live job. It's free.

Get my free matches
Cyber Security jobs in Riyadh81 live roles, top employers and pay.See all →

Similar jobs across the Gulf