Senior Security Engineer (NCA, DLP,… at Paramount… · Al Khobar

Senior Security Architect (NCA, DLP, Network Security)

Location: Al Khobar, Saudi Arabia (KSA)

Experience: 5+ years in Cybersecurity

Job Summary

We are looking for an experienced Senior Security Architect to design, implement, and govern enterprise security architectures, with strong expertise in NCA compliance, Data Loss Prevention (DLP), and Network Security. The role involves developing security frameworks, conducting architecture reviews, and ensuring alignment with regulatory requirements and enterprise security standards.

Key Responsibilities

• Design and review enterprise security architectures aligned with NCA Essential Cybersecurity Controls (ECC) and other applicable regulatory frameworks.
• Architect and oversee network security solutions, including firewalls, WAF, VPN, network segmentation, Zero Trust, and intrusion prevention systems.
• Design and implement DLP strategies to protect sensitive information across endpoints, networks, email, and cloud environments.
• Conduct security architecture reviews, threat modelling, risk assessments, and security gap analyses.
• Define security policies, technical standards, and reference architectures aligned with business and compliance requirements.
• Collaborate with infrastructure, cloud, application security, and SOC teams to integrate security controls into enterprise environments.
• Evaluate security technologies, lead proof-of-concept exercises, and provide technical guidance on solution implementation.
• Support security audits, compliance assessments, remediation activities, and risk reporting.

Required Skills and Qualifications

• Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related field.
• 5+ years of experience in cybersecurity, with significant experience in enterprise security architecture.
• Strong knowledge of NCA ECC requirements and experience implementing or assessing cybersecurity controls.
• Hands-on experience or architecture-level expertise in DLP solutions such as Digital Guardian, Forcepoint, Symantec, or Microsoft Purview.
• Strong understanding of network security technologies, including firewalls, WAF, IDS/IPS, VPN, and network segmentation.
• Knowledge of Zero Trust Architecture, IAM, vulnerability management, SIEM, and incident response.
• Relevant certifications such as CISSP, CISM, CCSP, or vendor-specific security certifications are preferred.
• Strong communication, stakeholder management, and technical documentation skills.

Preferred: Experience working in regulated enterprise environments in Saudi Arabia, with knowledge of applicable NCA cybersecurity requirements.