C
Lead Cybersecurity Engineer – Data Protection & HSM
Riyadh, Riyadh Province, Saudi Arabia · Full Time
Be the first to apply
- Experience
- 3+ yrs
- Salary
- —
- Openings
- 1
- Posted
- 1 day ago
- Work mode
- In office
- Education
- Bachelor's degree in Computer Science, Cybersecurity, Electronics & Communications Engineering, or related fields
- Resume
- Required to apply
Where you'll work
Sign in to tell us what does and doesn't work for you here — it sharpens every match we show you.
Job description
About the Role
We are looking for a Lead Cybersecurity Engineer specialized in Data Protection and Hardware Security Modules (HSM) to join our team on-site in Riyadh, Saudi Arabia. This full-time position involves designing, deploying, and managing enterprise-level data encryption and key management systems.
Primary Responsibilities
- Design and implement comprehensive data encryption strategies, access control policies, and key management frameworks that integrate HSMs with database systems such as Oracle and MS SQL TDE, web servers, Privileged Access Management (PAM), and Public Key Infrastructure (PKI).
- Manage full lifecycle of HSM and related appliances including deployment, patching, maintenance ensuring zero downtime for clusters like Thales Luna, payShield, and CipherTrust Manager.
- Conduct regular security audits, vulnerability assessments, and risk evaluations to ensure compliance with standards such as PCI-DSS, GDPR, and HIPAA.
- Oversee SIEM and log analysis tools including Splunk and ELK for threat monitoring, lead incident response actions, and optimize alert systems for better threat detection.
- Automate processes related to key lifecycle management like rotation, backup, and provisioning by leveraging Ansible and REST APIs.
Qualifications & Experience
- Minimum of 3 years of practical experience in cybersecurity focusing on data protection, encryption technologies, and key management solutions.
- Extensive expertise working with Thales HSMs (Luna) and the CipherTrust Data Security Platform.
- Strong understanding of cryptographic standards and protocols such as AES, RSA, PKCS#11, KMIP, and CTE.
- Preferred certifications include Thales Certified Engineer or Administrator (covering Luna, payShield, High Speed Encryption, CipherTrust) and recognized industry certifications such as CISSP or CISM.
- Bachelor's degree in Computer Science, Cybersecurity, Electronics & Communications Engineering, or a related discipline.
What We Provide
- Attractive salary packages commensurate with experience.
- Engagement with innovative cybersecurity projects on a regional scale.
- A collaborative culture that promotes continual learning and professional development.
Minimum education
Bachelor's Degree