IT Specialist - Security Architect

Job Summary

The IT Specialist – Security Architect plays a pivotal role in maintaining, enhancing, and securing Alghanim's enterprise security infrastructure across on-premises and cloud environments. Reporting to the IT Manager – Security Operations, this role leads the implementation, integration, and management of advanced cybersecurity platforms to protect enterprise data and systems. The specialist is expected to stay ahead of evolving cyber threats and design security architectures that mitigate risks, ensure compliance, and support business objectives. 

The role involves working closely with internal stakeholders and technology partners across multiple domains including perimeter security, SOC operations, threat detection, incident response, and cloud security, leveraging tools such as Palo Alto Prisma SASE, Exabeam SIEM, Fortinet and Palo Alto Firewalls, FireEye, Forescout NAC, and Attivo Deception technologies.

Job Responsibilities

Core Responsibilities:

Firewall Management:

• Manage and support Palo Alto (on-prem and cloud), Fortinet, Azure, and AWS Firewalls. 
• Perform rule updates, troubleshooting, performance tuning, and ensure optimal security posture.SASE & Remote Access:
• Administer Palo Alto Prisma Access (SASE) and GlobalProtect VPN.
• Implement split tunneling, policy enforcement, and regional DNS configurations for secure remote access.

SOC Operations:

• Oversee daily SOC activities.
• Work with third-party SOC to review alerts, respond to incidents, and ensure SLA adherence. 

Validate escalation quality and reduce false positives.SIEM (Exabeam):

• Monitor and manage SIEM alerts and behavior analytics. Support rule tuning, dashboard creation, and incident response workflows for accurate threat detection.

Security Platforms:

• Operate and manage:
  • Forescout NAC for device visibility and access control.
  • A10 Load Balancer for availability and traffic control.
  • FireEye for IPS and advanced malware sandboxing.
  • Attivo Deception for lateral movement and internal threat detection.

Incident Handling:

• Respond to and investigate security incidents. 
• Conduct root cause analysis, coordinate with teams for resolution, and provide documentation for lessons learned.Collaboration & Documentation:
  Coordinate with IT, network, and application teams to align security measures. Maintain updated SOPs, reports, and configurations. 

Candidate Requirements

• Graduation in computer Science or Equivalent.
• 5-8 years in security operations or architecture roles in large enterprise environments.
• Experience in security Operations, technology, Perimeter Security, Cyber Expert role within a complex business environment.
• Strong understanding of security tenets, such as encryption/key management, network design, access control and incident containment.
• An understanding of security methodologies, best practice and industry standards Experience in risk & regulatory frameworks and standards such as NIST 800, ISO 27001, PCI-DSS.
• Ability to maintain strict confidentiality.
• Excellent written and verbal communication skills, including the ability to interact with team members at all levels within the Family of Companies, from the end user to senior leadership. 
• Ability to think analytically and creatively.
• Ability to look at all situations objectively.
• Inherent need to challenge assumptions.
• Ability to work independently with minimum direction in a fast-paced environment as well as collaborate effectively while maintain an “options before obstacles” mindset