Job description

We are seeking a Security & Server Engineer to oversee both the software security (for our Laravel & Flutter applications) and server infrastructure. This role involves implementing robust security measures at the code level, managing on-premises or cloud-based servers located inside Saudi Arabia, and ensuring regulatory compliance. You will collaborate closely with our development teams to identify, prioritize, and resolve security vulnerabilities, while also maintaining high availability and performance of our systems.

Key Responsibilities

Software Security:

Conduct security reviews, code audits, and penetration tests on Laravel (PHP) and Flutter (Dart) codebases.

Implement secure coding practices, address vulnerabilities (e.g., OWASP Top 10), and enforce best practices across development teams.

Work with developers to integrate security measures into the CI/CD pipeline, including automated scanning tools.

Server Infrastructure Management:

Manage servers hosted inside Saudi Arabia (physical or cloud-based), ensuring optimal performance and adherence to data residency requirements.

Automate server provisioning, configuration, and monitoring for high availability and scalability.

Oversee backup and recovery solutions, ensuring data integrity and minimal downtime.

Network & System Security:

Implement and maintain firewalls, Intrusion Detection/Prevention Systems (IDS/IPS), and threat intelligence tools.

Configure secure network segments and VPNs in compliance with local regulations.

Conduct regular security assessments and address vulnerabilities promptly.

Compliance & Audits:

Ensure systems comply with local and international standards (PCI-DSS, ISO 27001, etc.), especially those required by Saudi regulations.

Prepare for and coordinate third-party security audits and penetration tests.

Incident Response & Documentation:

Lead investigation, response, and remediation efforts for any security incidents or breaches.

Document findings, propose preventative measures, and maintain up-to-date incident reports.

Continuous Improvement:

Stay current with emerging security threats, tools, and methodologies, applying relevant updates to maintain a robust security posture.

Collaborate with cross-functional teams to strengthen security awareness and readiness.

Qualifications

Education: Bachelor’s degree in Information Security, Computer Science, or related field.

Experience: 3+ years of professional experience in cybersecurity, server management, or a similar role.

Software Security:

Demonstrated experience securing Laravel or other PHP frameworks, as well as Flutter or comparable mobile frameworks.

Understanding of secure coding practices, code review processes, and vulnerability management.

Server Administration:

Proficiency in managing Linux/Windows servers; experience with server orchestration and monitoring tools.

Familiarity with cloud providers or private data centers in Saudi Arabia; ability to ensure compliance with local regulations.

Network Security:

Expertise in firewalls, IDS/IPS, VPN, and encryption technologies.

Strong knowledge of TCP/IP, VLANs, and load balancing.

Regulatory & Compliance:

Experience working in regulated environments, especially in fintech or payment solutions.

Knowledge of PCI-DSS, ISO 27001, and local data protection regulations in Saudi Arabia.

Soft Skills:

Excellent communication, collaboration, and problem-solving abilities.

Ability to document policies, procedures, and incidents clearly and effectively.

Preferred Skills

Relevant security certifications (CISSP, CISM, CEH)

DevOps experience (Ansible, Terraform, Kubernetes)

Knowledge of Zero Trust architectures

Previous experience in fintech or payment security

Why Join Us?

Opportunity to shape the security landscape of innovative fintech solutions.

Collaborative and growth-oriented work culture.

Competitive compensation package with attractive benefits.

Work directly with advanced technologies and frameworks (Laravel, Flutter) within a compliant environment in Saudi Arabia.