Security and ICT Engineer

Security and ICT Engineer Full-time State/Province: Riyadh Business Group: DCS Legal Entity: AECOM Arabia Business Line: B&P - Buildings & Places Work Location Model: On-Site Operating Group: International Primary Location: KSA - Riyadh, SA - The Business Gate Company Description Work with Us. Change the World. At AECOM, we're delivering a better world. Whether improving your commute, keeping the lights on, providing access to clean water, or transforming skylines, our work helps people and communities thrive. We are the world's trusted infrastructure consulting firm, partnering with clients to solve the world’s most complex challenges and build legacies for future generations. There has never been a better time to be at AECOM. With accelerating infrastructure investment worldwide, our services are in great demand. We invite you to bring your bold ideas and big dreams and become part of a global team of over 50,000 planners, designers, engineers, scientists, digital innovators, program and construction managers and other professionals delivering projects that create a positive and tangible impact around the world. We're one global team driven by our common purpose to deliver a better world. Join us.

We are seeking a detail-oriented and analytical Security and ICT Engineer to join our organization in Riyadh, Saudi Arabia. In this role, you will be responsible for designing, implementing, and maintaining secure information and communication technology infrastructure. You will work to protect our organization's critical systems and data while ensuring compliance with industry security standards and regulations. The successful candidate will demonstrate strong technical expertise, organized problem-solving abilities, and a commitment to maintaining the highest security standards. Design, implement, and maintain secure ICT infrastructure and network systems Conduct comprehensive security vulnerability assessments and penetration testing to identify potential risks Configure and manage firewalls, intrusion detection systems, and other security appliances Develop and enforce security policies, procedures, and protocols aligned with industry standards Monitor network traffic and system logs to detect and respond to security incidents Perform regular security audits and ensure compliance with relevant regulations and frameworks Troubleshoot and resolve ICT and security-related issues in a timely and efficient manner Collaborate with IT teams to implement security patches, updates, and system improvements Document security configurations, incidents, and remediation actions for audit and compliance purposes Stay current with emerging security threats and recommend preventive measures Provide technical support and guidance to end-users regarding security best practices Qualifications **Required Qualifications:** Proven 10 years of experience or more in network security and ICT infrastructure management Strong knowledge of security protocols, standards, and frameworks (ISO 27001, NIST, etc.) Proficiency with firewall technologies, intrusion detection/prevention systems, and security tools Experience with vulnerability assessment and security scanning tools Solid understanding of system administration and network architecture Demonstrated experience in incident response and security troubleshooting Knowledge of data protection and encryption technologies Excellent analytical and problem-solving skills with strong attention to detail Ability to work independently and collaboratively within technical teams **Preferred Qualifications:** Security certifications such as CISSP, CEH, Security+, or CompTIA Security+ Experience with cloud security and cloud infrastructure protection Knowledge of scripting languages or automation tools for security tasks Experience with security information and event management (SIEM) systems Background in risk assessment and security compliance auditing Familiarity with regulatory requirements