Specialist - IT Security

About Almosafer

Almosafer Travel & Tourism Co stands at the forefront of redefining the travel and tourism landscape, not merely as a participant but as a visionary leader shaping the industry’s future. As Saudi Arabia’s premier travel company, we cater to millions across diverse segments of the travel ecosystem, delivering seamless, personalized, and purposeful experiences. Rooted in our name, which translates to "the traveler," we embody the essence of exploration and connection, ensuring every journey reflects the rich cultural heritage and dynamic spirit of Saudi Arabia and the broader region.

Our ambitious vision is clear: to establish Almosafer as the undisputed leader in travel services, fostering enduring connections and setting unprecedented benchmarks for excellence throughout the Kingdom and beyond. Our teams, spanning Saudi Arabia and the wider region, combine deep cultural insights with cutting-edge innovation, pioneering a new standard for travel excellence in the region.

Role Overview

This role transcends the conventional boundaries of an incident response or analyst position. While operational responsibilities such as detection engineering and incident response remain critical, a significant portion of your time will be dedicated to high-impact project work. If you are driven by the opportunity to make a tangible difference and lead innovative security initiatives, we invite you to join our global team and contribute to shaping the future of security at Almosafer. We seek systems and software engineers who thrive on solving complex security challenges from first principles, delivering solutions that are both robust and forward-thinking.

Key Responsibilities

• Security System Development: Design, deploy, and maintain large-scale security systems across Almosafer’s diverse ecosystem, ensuring robust protection against evolving threats.
• Innovation & Tooling: Research, innovate, and enhance security capabilities through the development and integration of advanced tools and technologies.
• Automation Strategies: Develop intelligent automation frameworks to minimize manual alert triage, enhancing efficiency and reducing response times.
• Detection Engineering: Conduct comprehensive detection engineering to expand coverage, identifying malicious activities across endpoints, infrastructure, networks, and cloud environments.
• Incident Investigation: Lead end-to-end investigations of alerts and potential security incidents, including digital forensics, malware analysis, and threat intelligence integration.
• Incident Response Leadership: Spearhead incident response efforts, addressing intrusion attempts and suspicious activities while collaborating with cross-functional teams across Almosafer.
• Red Team Exercises: Participate in red team exercises and threat simulations to identify security gaps, enhance team competencies, and expand organizational knowledge.

Profile Requirements

• Education & Experience: Bachelor of Science in Computer Science, Engineering, Information Systems, or equivalent professional experience in a related technical field.
• Professional Background: Minimum of 3 years of experience in incident response, detection engineering, or related security disciplines.
• Technical Proficiency: Strong programming skills in Python, Rust, and/or Go, with the ability to develop and implement security solutions effectively.
• Security Models: Practical experience with BeyondCorp or Zero Trust security frameworks, ensuring alignment with modern security best practices.
• Expertise in Detection & Response: Proven expertise in one or more of the following areas:
  • Digital forensics (artefacts, disk/cloud acquisition, tools such as GRR and Timesketch)
  • Malware analysis (static and dynamic analysis, tools like IDA Pro and Ghidra)
  • Incident management and response (handling large-scale, multi-stakeholder events)
  • Host/network intrusion detection (parsing large, unfamiliar logs/systems)
  • Network telemetry (flows, PCAPs, Zeek)
  • Threat intelligence (modelling actors and Tactics, Techniques, and Procedures (TTPs))
  • Threat hunting (identifying Indicators of Compromise (IOCs) across data lakes)
• Operating System Knowledge: In-depth understanding of OS internals across two or more of macOS, Windows, or Linux, including file/disk structures, forensics, security controls, hardening, scripting, and binary analysis.
• Cloud Expertise: Advanced knowledge of cloud environments, with the ability to build, deploy, and investigate security events across two or more of AWS, Kubernetes, or GCP.

Why Join Almosafer?

At Almosafer, we foster a workplace where purpose, clarity, and integrity drive our collective success. Your contributions will directly impact the travel experiences of millions, connecting you to something greater than yourself. Our teams operate with a shared commitment to excellence, accountability, trust, and collaboration, supported by structures that empower you to make meaningful contributions from day one.

Here, you will find:

• A purpose-led environment where your ideas drive real-world impact.
• Ongoing learning and development opportunities tailored to your growth and aspirations.
• A culture of recognition that celebrates your achievements and milestones.