Senior Network & Email Security Engineer – Cyber Defense Specialist (5+ Years)

Senior Network & Email Security Engineer – Cyber Defense Specialist (5+ Years)Job Openings Senior Network & Email Security Engineer – Cyber Defense Specialist (5+ Years)About the job Senior Network & Email Security Engineer – Cyber Defense Specialist (5+ Years)Senior Network & Email Security Engineer – Cyber Defense Specialist (5+ Years)Location: Riyadh, Saudi Arabia (On-site)Employment Type: Full-TimeEligibility: Saudi Nationals OnlyCompany: One of the Global Big 5 Consulting FirmsAbout the RoleWe are seeking a highly skilled Senior Network & Email Security Engineer to join a leading Big 5 consulting firm, supporting a mission-critical, enterprise-scale environment within a regulated sector.This role is responsible for maintaining a hardened network perimeter and securing enterprise email systems, ensuring operational excellence, audit readiness, and stability across all security controls. You will own day-to-day operations, incident response, and change governance across network and email security platforms.Key ResponsibilitiesNetwork Security OperationsPerform daily health checks for Next-Generation Firewall (NGFW) environments, including cluster status, updates, licensing, and HA synchronizationMaintain and optimize firewall rulebases by removing unused or redundant rules and enforcing least privilege accessEnsure proper configuration of security profiles (IPS, Anti-Virus, URL Filtering, Threat Prevention)Manage remote access solutions (e.g., VPN), ensuring secure configurations and seamless user experienceTroubleshoot traffic and connectivity issues using logs, packet capture (PCAP), and policy simulationsEmail Security OperationsManage and optimize Secure Email Gateway policies for inbound and outbound email protectionStrengthen defenses against phishing, BEC (Business Email Compromise), and impersonation attacksOversee URL rewriting, sandboxing, and attachment detonation processesManage quarantine workflows, user notifications, and false positive/negative handlingCollaborate with messaging teams on SPF, DKIM, and DMARC alignment and email delivery healthLead and coordinate response to high-priority (P1) security incidentsWork closely with SOC teams to analyze SIEM alerts and execute response playbooksImplement rapid containment measures (blocking rules, sender controls, sandbox verdicts)Conduct root cause analysis (RCA) and implement corrective and preventive actionsPrepare CAB-ready change requests with full impact analysis, testing plans, and rollback strategiesExecute firmware upgrades, signature updates, and policy changesPerform post-change validation and ensure proper documentationCompliance & Audit ReadinessMaintain comprehensive, audit-ready documentation including change records, policy exports, logs, and incident reportsEnsure alignment with regulatory frameworks such as SAMA and NCA Cybersecurity Framework (CSF)Support internal and external audits with clear, traceable evidence and reportingDocumentation & Knowledge TransferDevelop and maintain SOPs and runbooks for operational processes and incident handlingMentor junior engineers (L1/L2) and support knowledge transfer initiativesDrive continuous improvement in operational practices and documentation standardsTechnology EnvironmentNetwork Security: NGFW (Palo Alto or equivalent), VPN (site-to-site & remote access), IPS, URL filtering, sandboxing, SSL decryption, HA/failoverEmail Security: Secure Email Gateway (Proofpoint or equivalent), phishing/BEC protection, sandboxing, quarantine managementMonitoring & Integration: SIEM/SOAR platforms, log analysis, threat intelligence integrationCandidate ProfileRequired Qualifications5+ years of experience in enterprise network and email security operationsHands-on experience with NGFW platforms (preferably Palo Alto)Experience with Secure Email Gateways (e.g., Proofpoint or equivalent)Strong understanding of incident and change management processesProficiency in packet analysis, SSL decryption concepts, and email flow fundamentalsStrong communication and reporting skills (English required, Arabic is a plus)Preferred QualificationsExperience in banking or regulated environmentsFamiliarity with SIEM/SOAR integrations and security automationRelevant certifications (e.g., PCNSE, email security certifications, ITIL)Success Metrics (First 90–180 Days)Improved firewall rulebase hygiene with reduced redundancy and full security profile coverageHigh availability stability with zero unplanned failoversVPN performance aligned with defined SLAs and MFA enforcementMeasurable reduction in phishing/BEC incidents and improved email security effectivenessTimely delivery of audit-ready documentation and successful internal audit validationWorking ModelOn-site at client premises in Riyadh (Sunday–Thursday)On-call support required for critical incidents (P1) and planned changesWhy Join This OpportunityBe part of one of the world’s leading Big 5 consulting firmsWork in a highly secure, regulated, enterprise-scale envir